Omar Aloraini

> Did the blank subPath get your chart working again? @itsjusth That's what I did, and it works.

@aditighag ``` [vagrant@node2 ~]$ sudo tcpdump -i eth1 dst 192.168.33.30 -vv dropped privs to tcpdump tcpdump: listening on eth1, link-type EN10MB (Ethernet), capture size 262144 bytes 01:28:55.537730 IP (tos 0x0,...

@aditighag The above dump was taken from a cluster running Cilium 1.11.0. There is no VRRP packets in the dump, which is precisely the issue. The following dump is taken...

I'm deploying with same Helm values. I just change the chart version. I'll disable the host firewall on 1.11 and test.

Update: With `hostfirewall` disabled, it works on 1.11. ``` [vagrant@node1 ~]$ k exec -n kube-system cilium-5l4dg -- cilium status --verbose Defaulted container "cilium-agent" out of: cilium-agent, clean-cilium-state (init) KVStore: Ok...

Keepalived is running on the host with the following configuration: ``` global_defs { router_id LVS_DEVEL enable_script_security } vrrp_script check { script "/usr/libexec/keepalived/check" interval 3 weight -2 fall 5 rise 2...

> > > Update: > > With hostfirewall disabled, it works on 1.11. > > Thanks for following up. > > What's the output of this command when run from...

1.10.4: ``` ❯ k exec cilium-2xt2q -- bpftool net show Defaulted container "cilium-agent" out of: cilium-agent, clean-cilium-state (init) xdp: tc: eth1(3) clsact/ingress bpf_netdev_eth1.o:[from-netdev] id 701 eth1(3) clsact/egress bpf_netdev_eth1.o:[to-netdev] id 707...

It would make more sense if the default behavior of external-dns is to prefer non RFC1918 addresses when multiple addresses are available. The `net-filter` args will not work if you...

``` diff --git a/source/service.go b/source/service.go index 9c47579d..81b856db 100644 --- a/source/service.go +++ b/source/service.go @@ -19,6 +19,7 @@ package source import ( "context" "fmt" + "net" "sort" "strings" "text/template" @@ -529,6 +530,7...