Yutaro Hayakawa

Introduce a cluster-aware addressing scheme

1

Please see commit messages for more details. ```release-note Introduce a cluster-aware addressing scheme ```

### Is there an existing issue for this? - [X] I have searched the existing issues ### What happened? While investigating #20797, we found that the 7th bit of the...

CI: ConformanceAKS: client-egress-expression-knp: Timeout occurred

1

## CI failure ``` [=] Test [client-egress-expression-knp] [20/58] . ℹ️ 📜 Applying KubernetesNetworkPolicy 'client-egress-to-echo-expression' to namespace 'cilium-test'.. [-] Scenario [client-egress-expression-knp/pod-to-pod] [.] Action [client-egress-expression-knp/pod-to-pod/curl-ipv4-0: cilium-test/client-75bff5f5b9-vvwvs (10.0.1.89) -> cilium-test/echo-other-node-85596c[95](https://github.com/cilium/cilium/actions/runs/7272018639/job/19813476725#step:19:96)77-ncvmp (10.0.0.206:8080)] ❌ command...

With this kind of the code pattern ```c struct per_cluster_ct_map4_inner_map { __uint(type, CT_MAP_TYPE); __type(key, struct ipv4_ct_tuple); __type(value, struct ct_entry); __uint(max_entries, CT_MAP_SIZE_TCP); #ifndef HAVE_LRU_HASH_MAP_TYPE # ifndef HAVE_LRU_HASH_MAP_TYPE __uint(map_flags, CONDITIONAL_PREALLOC); # endif...

CI: Conformance AKS: no-errors-in-logs: unexpected EOF

1

## CI failure ``` [-] Scenario [check-log-errors/no-errors-in-logs] [.] Action [check-log-errors/no-errors-in-logs/cilium-cilium-8183062380-1-3/kube-system/cilium-operator-67fc7c968-n4fxb (cilium-operator)] [.] Action [check-log-errors/no-errors-in-logs/cilium-cilium-8183062380-1-3/kube-system/cilium-sdq9f (cilium-agent)] [.] Action [check-log-errors/no-errors-in-logs/cilium-cilium-8183062380-1-3/kube-system/cilium-sdq9f (config)] [.] Action [check-log-errors/no-errors-in-logs/cilium-cilium-8183062380-1-3/kube-system/cilium-sdq9f (mount-cgroup)] [.] Action [check-log-errors/no-errors-in-logs/cilium-cilium-8183062380-1-3/kube-system/cilium-sdq9f (apply-sysctl-overwrites)] 🟥 Error reading...

CI: v1.12: Suite-k8s-1.20.K8sServicesTest Checks E/W loadbalancing (ClusterIP, NodePort from inside cluster, etc) with L4 policy Tests NodePort with L4 Policy

5

### Test Name ```shell Suite-k8s-1.20.K8sServicesTest Checks E/W loadbalancing (ClusterIP, NodePort from inside cluster, etc) with L4 policy Tests NodePort with L4 Policy ``` ### Failure Output ```shell FAIL: Request from...

* [ ] #32084 (@pchaigno) * [x] #32328 (@joestringer) * [ ] #32017 (@mikemykhaylov) * [ ] #32307 (@ferozsalam) * [x] #32513 (@giorio94) * [x] #32536 (@harsimran-pabla) :warning: resolved conflicts...

v1.14 Backports 2024-05-24

5

* [x] #32084 (@pchaigno) :warning: resolved conflicts * [x] #32328 (@joestringer) * [ ] #32017 (@mikemykhaylov) * [x] #32513 (@giorio94) * [ ] #32464 (@darox) :warning: resolved conflicts * [x]...

Revert golang image version of hubble-relay

1

I mistakenly bumped up the golang image version in hubble-relay Dockerfile in the v1.15 backport. Revert it. Also, let me piggy-back the very small cosmetic change for GHA. Fixes: #32691...

v1.13 Backports 2024-05-24

9

* [x] #32084 (@pchaigno) :warning: resolved conflicts * [x] #32328 (@joestringer) * [ ] #32464 (@darox) :warning: resolved conflicts * [x] #32553 (@michi-covalent) :warning: resolved conflicts * [x] #32564 (@jibi)...