John Fastabend

cilium: encryption, subnet IPSec mode configuration may segfault on init

1

If not all of our preconditions are met, e.g. IP allocation fails or IP lookup fails its possible for enableSubnetIPSec, ``` func (n *linuxNodeHandler) enableSubnetIPsec(v4CIDR, v6CIDR []*net.IPNet) ``` to segfault....

Use GetConfigOrDie instead of InClusterConfig

2

Avoid process exit when debugging directly with KUBECONFIG file Signed-off-by: Duan Jiong Signed-off-by: John Fastabend

Tetragon: Repeatable benchmarks

1

We run a set of benchmarks against Tetragon, usually around release time. It would be nice to have some way via tetragon.io report what we do and results out. Then...

## Tetragon release checklist - [ x] Check that there are no [release blockers]. - [ x] Set `RELEASE` environment variable. For example, if you are releasing `v0.8.1`: export RELEASE=v0.8.1...