Dorde Lapcevic

[agent] Implement Temporary Security Identity Allocation

6

Temporary security identities are required when global identity (Cilium Identity) management is moved to cilium-operator. This will be integrated with the Local Only Identity Allocator. (reference: https://github.com/cilium/cilium/pull/30356) No user facing...

operator: Implement cache to be used for Cilium Identity management

4

A part of the "Operator manages global identities" implementation -- https://github.com/cilium/cilium/pull/30356 No user facing changes. The cache is to be used by the Cilium Identity controller in cilium-operator to track:...

[agent] Export and refactor parts of identity cache allocator

6

The common code for local identity allocation is extracted into a new struct `LocalCacheAllocator`, which is used by the `CachingIdentityAllocator` to allocate reserved and local identities, before executing it's logic...

Remove PolicyImportErrorsTotal agent metric in Cilium 1.15

3

It is deprecated in Cilium 1.14, and should be removed in Cilium 1.15. Context: https://github.com/cilium/cilium/pull/23349 /kind cleanup /area metrics

Operator manages identities - full implementation

13

**Feature: Operator Manages Cilium Identities** CFP: https://github.com/cilium/cilium/issues/27752 **Description** A new feature hidden behind a flag. Disabled by default. Besides the new flag that enables the feature, there are no other...

Decouple k8s client heartbeat from connection timeout and keep alive

2

The main reason to introduce this is to be able to increase the heartbeat interval without affecting the k8s client connection settings. It also allows the possibility to disable heartbeat,...

Adopting Scalability Improvements in Cilium

4

This issue is made to track the effort of making scalability improvements to be default configuration in Cilium. Main improvements are: * Cilium Endpoint Slice (CES) - https://github.com/cilium/cilium/issues/16931 * Operator...

CFP-27752: Operator Manages Cilium Identities

1

CFP google doc: https://docs.google.com/document/d/1Hcc_2mB9OOUxrqQgZ-gSYDPnLYE_If_TCzVbUGDOdGM More discussion can be found in: https://github.com/cilium/design-cfps/pull/19

policy: Add config for enabling Cilium Clusterwide Network Policy

2

Related to modularizing network policies: #33360 Previous config change that includes both CNP and CCNP in the same flag: https://github.com/cilium/cilium/pull/35049 Signed-off-by: Dorde Lapcevic

cilium-operator is creating CIDs for pods. It should only create CIDs for pods that are managed by Cilium. Operator manages CIDs CFP: https://github.com/cilium/design-cfps/pull/59