Paul Chaignon
Paul Chaignon
Note you have a few warnings in Cilium agent logs, though I don't think they are related to the present issue. > I don't have this issue using Calico. With...
I don't see any drops reported by iptables or Cilium that could explain this. Are you able to say what that timeout means? Is it even about something going out...
The behavior change is unexpected AFAIK. I also can't think of a change in v1.11 that could explain this. Next step would probably be to bisect.
> Root cause of this was #17459, which is currently mitigated by [cilium/cilium-cli#558](https://github.com/cilium/cilium-cli/pull/558). I think the present issue is a different flake. I'm not seeing the `to-proxy` traces characteristic of...
Yes, they do, usually as one of the last traces. See https://github.com/cilium/cilium-cli/issues/367#issuecomment-920218323.
> The symptoms appear to be that we see DNS packets flowing back and forth successfully between the client and kube-dns pod within the same node, but we see no...
We attempted to reenable the IPsec test on EKS after checking it was passing 20 times (10 locally, 10 in PR). We had to revert that change in https://github.com/cilium/cilium/pull/19078 after...
Oh, IPsec testing is actually still disabled on EKS :disappointed:
@F1ko Nothing in progress that I know of. Feel free to send a PR.
LGTM, but this will almost certainly require changes on GitHub's side. /cc @lildude