Alejandro Pedraza

Before attempting to use host networking, can you post the events (`kubectl describe`) for the deployments (not the pods) after rolling them out to see if there's any info about...

Also, can you post what you get from `kubectl get mutatingwebhookconfigurations.admissionregistration.k8s.io linkerd-proxy-injector-webhook-config -oyaml`?

FWIW I've successfully tested linkerd with cilium in [chained in hybrid mode with AWS VPC CNI](https://docs.cilium.io/en/stable/installation/cni-chaining-aws-cni/#chaining-aws-cni), and it worked fine. Looking forward to what you find out about the control...

The hostname in the authority must match the first segment of the ServiceProfile name. So you need to create separate ServiceProfiles for each authority, like "`permissions-service..svc.cluster.local`", "`storage-service..svc.cluster.local`", etc. When using...

Yeah, that jaeger-ui AuthorizationPolicy is restricting access from viz' `web` ServiceAccount only, used when using the jaeger site from the viz dashboard. To allow accessing via the ingress, you would...

Can you provide the logs for the policy container when that happened? (the ones you provided are from a go-based container, probably the destination container).

Thanks for the review @adleong. I think I'm gonna put this one into draft and let's instead focus on #12428 first so that we have a clearer picture of the...

I have rebased with the latest main, which now includes the IP family in the Addresses index key so the first failure case is no longer relevant here. I haven't...

I've raised #12131 to separately track the issue with the policy controller manifest.

Thanks for the detailed report. Can you give a shot at the latest edge release? Since 2.14.9 we've pushed a few improvements that address discovery staleness.