Jo Rhett

> We're looking at how this might be incorporated into a plan the engineering team has been developing, allowing the tailnet to opt-in to nodes overriding subnet routes advertised by...

I've lost several days iterating through this problem, and it's unsolveable without a complete rewrite of the NFT support in Calico. The underlying problem here is that instead of adding...

> Set `FELIX_IPTABLESBACKEND` from `Auto` to `Legacy` and you are fixed. That would be a very odd definition of "fixed" -- you must be referring to usage which means castrated?...

Oh, I took no offense to your use of the word. As a writer myself, I tried to play with the word to make it clear I was laughing so...

> The current best answer is to use iptables-nft Which does not work, as the issue reports here and as I and other have reported. iptables-nft fails when anything that...

@benkehoe any update on this? I ran into this problem recently, and it took me hours to figure out what was missing.

> Could I ask what concern is being addressed by setting a 24 hour expiry? That's not within my control. It's policy that we must enforce. You can debate with...

I just edited the top to also be much more obvious when it expires. It quietly changes the icon in my toolbar... which is not clear to the user. They...

1. I have the latest version and I got no such notifications today when my session expired, so I don't believe this is working. 2. The other half of this...

> @DentonGentry wrote: You may not believe it, but there is one. There is a large popup asking to reauthenticate. Yes, there is. But there is no menu option to...