Marco Iorio
Marco Iorio
Extend the validation performed upon retrieval of node and service entries from a remote cluster, to ensure improved consistency and prevent the propagation of corrupted data. In particular, let's ensure...
Explicitly validate that the identities retrieved from a remote cluster match the expected range based on the corresponding clusterID, to ensure improved consistency and prevent the propagation of corrupted data....
## CI failure - Hit on https://github.com/cilium/cilium/pull/33398 - Link: https://github.com/cilium/cilium/actions/runs/9683799637/job/26720106567?pr=33398 - Sysdump: [cilium-sysdumps-out.zip](https://github.com/user-attachments/files/16009207/cilium-sysdumps-out.zip) ``` ❌ Found 2 logs in kind-chart-testing/kube-system/cilium-qwmj4 (cilium-agent) matching list of errors that must be investigated: time="2024-06-26T17:14:12Z"...
Currently, a comment attached to the Remove method claims that the cached data would have disappeared due to lease expiration. However, the lease is never expected to expire, as we...
### Is there an existing issue for this? - [X] I have searched the existing issues ### What happened? When both tunneling and host firewall are enabled, pod to node...
We have been recently witnessing a few [conformance ipsec runs reporting leaked packets](https://github.com/cilium/cilium/issues/33084), with some referring to DNS answers from a coredns pod to a CiliumInternalIP. In order to simplify...
## CI failure Hit on https://github.com/cilium/cilium-cli/pull/2591 Link: https://github.com/cilium/cilium-cli/actions/runs/9478248176/job/26139294496?pr=2591 Sysdump: [cilium-sysdump-out.zip](https://github.com/user-attachments/files/15808345/cilium-sysdump-out.zip) From the sysdump: ``` NAMESPACE NAME READY STATUS RESTARTS AGE IP NODE NOMINATED NODE READINESS GATES cilium-test client-69748f45d8-5mj4r 1/1 Running...
Currently, temporary connection disruption can occur on agent restart when Cilium is configured in native routing mode, and WireGuard encryption is enabled, because the list of AllowedIPs gets recreated from...
The Cilium CLI install and upgrade commands build on top of the corresponding helm commands, adding a bit of extra logic on top to automatically configure certain parameters based on...
Following the formalization of the cluster name format in the previous Cilium version \[1\], let's now make the validation strict, and reject invalid cluster names. \[1\]: 3ba429d0f2f6 ("options: formalize and...