Aditi Ghag

Add trace points for socket-LB

4

Fixes: https://github.com/cilium/cilium/issues/19623

pkg/endpoint: Fix circularity in the endpoint delete handler leading to incorrect errors

6

A per endpoint controller is started when an endpoint is being created, or restored. The controller triggers regeneration process for the endpoint that's tasked with attaching BPF programs to the...

Print packet drop reason collected from `kfree_skb_reason`

1

Details are in the lwn article - https://lwn.net/Articles/885729/. >This information is not actually useful to the kernel, but it has been added to the existing kfree_skb tracepoint, making it available...

install: Add init container to mount cgroup2 filesystem

1

We need to mount cgroup2 filesystem on the underlying host in order to enable socket-based load-balancing in environments with container runtime cgroupv2 configurations. See issues for more details - https://github.com/cilium/cilium/pull/16259...

Replace busy wait loops with kubectl `wait`

2

Replace busy wait loops with the `wait` functionality exposed by kubectl - https://kubernetes.io/docs/reference/generated/kubectl/kubectl-commands#wait. It supports waiting for deleted resources too. `Alternatively, the command can wait for the given set of...

Track stats for ipcache propagation wait loop

2

Commit 37d795c introduced logic to wait for ipcache entries to be populated. Currently, we set an upper bound on the timeout set in such loops, but it'll good to have...

Catch ginkgo test regressions on macOS

3

We've had [instances](https://github.com/cilium/cilium/commit/3222f50d05d722e39563fa65fe99b52c0858941a) of [PRs](https://github.com/cilium/cilium/commit/ea75a7204849356d5bb2cfe3230b44d1ef2c32c2) breaking ginkgo test runs on macOS. Add a GitHub action for `darwin` target to catch such regressions on the PRs introducing platform specific code changes....

[node-local dns] DNS requests intermittently receive refused response errors

2

### What happened? DNS requests from application pods were failing intermittently with the "refused" error response code from the node-local dns cache. Here is a snippet from the node-local dns...

Disable socket-LB for connected UDP

6

Until we've fully resolved the socket-LB limitation, add an option to disable socket-LB only for connected UDP (this enables socket-LB for TCP). More context - https://github.com/cilium/cilium/issues/28820.