Marco Iorio

More occurrences: https://github.com/cilium/cilium/actions/runs/6232761468

My understanding is that the downgrade path also requires https://github.com/cilium/cilium/pull/28830 to be fixed.

/test

Force pushed to clarify the commit message around the possibility of traffic with destination identity matching a remote node needing to go through the tunnel if the destination is a...

/test

/test

> Is there an end-to-end test coming to cover this? Yep, I've opened https://github.com/cilium/cilium-cli/pull/2306 to introduce basic host firewall connectivity tests as part of the Cilium CLI, and once merged...

I've opened https://github.com/cilium/cilium/pull/30914 to switch two existing Conformance E2E configurations (with KPR disabled) to also enable host firewall. I couldn't add a commit to this PR as the branch is...

CI is green, reviews are in, marking ready to merge.

Hit on https://github.com/cilium/cilium/pull/31781 as well Link: https://github.com/cilium/cilium/actions/runs/8558031031/job/23451850493 ``` FAIL: Can not connect to service "http://[fc00:c111::4]:32634" from outside cluster (2/10) Expected command: kubectl exec -n kube-system log-gatherer-m9grq -- curl -k --path-as-is...