Marco Iorio

CI: Conformance E2E - allow-all-except-world/pod-to-pod/curl-ipv4-5 - command terminated with exit code 28

1

## CI failure Hit on https://github.com/cilium/cilium/pull/29896 Link: https://github.com/cilium/cilium/actions/runs/7258862251/job/19774908559 Sysdump: [cilium-sysdump-11-20231219-075521.zip](https://github.com/cilium/cilium/files/13713439/cilium-sysdump-11-20231219-075521.zip) ``` [=] Test [allow-all-except-world] [5/69] ........... ℹ️ 📜 Applying CiliumNetworkPolicy 'allow-all-except-world' to namespace 'cilium-test'.. [-] Scenario [allow-all-except-world/pod-to-pod] [.] Action [allow-all-except-world/pod-to-pod/curl-ipv4-0:...

bpf: correctly encapsulate pod to node traffic with kube-proxy+hostfw

1

When the host firewall is enabled in tunneling mode, pod to node traffic needs to be forwarded through the tunnel in order to preserve the security identity (as otherwise the...

Don't emit an error message on namespace termination due to Ingress reconciliation

1

When a namespace containing an Ingress configured in dedicated mode gets deleted, the controller may first receive the event corresponding to the deletion of one of the dependent resources, and...

bpftrace v0.20.1, Linux 4.19 - ERROR: Error loading program

3

### What reproduces the bug? Provide code if possible. The latest version (v0.20.1) of bpftrace run against a 4.19 kernel (specifying the path to the BTF file through the `BPFTRACE_BTF`...

This prevents possible shenanigans caused by search domains possibly propagated to the pods.

Make Cilium CLI work with Cilium installed through helm with a non-default name

6

Quite a few Cilium CLI commands fail with a `release: not found` error if Cilium got installed through helm with a non-default name. For instance: ``` $ helm install -n...

Improve coverage of Ingress service

1

Please refer to the individual commits for additional details. Blocked by https://github.com/cilium/cilium/pull/31386#issuecomment-1999858350

Connectivity tests pods may be unschedulable in a two nodes cluster

2

Hit on a CI run: https://github.com/cilium/cilium-cli/actions/runs/7259322671/job/19826588396?pr=2194 The test cluster has four nodes, but Cilium is deployed on only two, while the other two are reserved for extra tests. Which is...

Historically, Cilium agents validated the version of the etcd endpoints they connected to, expecting v3.1 or subsequent. Yet, this check has been [recently dropped](https://github.com/cilium/cilium/pull/28834), given that the currently supported versions...

Introduce CLI commands to troubleshoot connectivity issues to the etcd kvstore and clustermesh control plane

2

Troubleshooting etcd connectivity issues, regardless of whether to the Cilium kvstore or to a remote cluster, is a complex activity, as issues can concern network connectivity, TLS certificates mismatch, authn/authz...