Skyler Mäntysaari
Skyler Mäntysaari
Example of such logo being visiable: 
> Thanks for this @samip5, would you be able to collect a sysdump from the cluster please? (https://docs.cilium.io/en/stable/operations/troubleshooting/#reporting-a-problem if you need some instructions). That contains a LOT of things, could...
> @samip5 It usually happens when your ICMPv6 packet uses an IPv6 address not assigned by Cilium as a source. Could you provide us with the address information of your...
>Ok, got it. So, these link-local address is from outside of your cluster correct (BTW, it seems like it's a Multicast Listener Report message (type: 143))? ``` Jul 24 08:47:22.095:...
> Then, Cilium doesn't know about your Pod's link-local addresses, because it's automatically assigned by the Linux kernel and not by Cilium. So, Cilium cannot recognize it and thinks that's...
One other thing in the log snippet: ``` Jul 14 13:21:44.952: 2001:14ba:16fd:9610:307:aa4a:a67b:ffc7 (world) fddf:f7bc:9670:1::d037 (world) Stale or unroutable IP DROPPED (ICMPv6 EchoRequest) ``` That security identity as world is incorrect...
I think the problem is wider than just those. Eg blackbox-exporter running as root, will not be able to ping things. [cilium-sysdump-20230726-230133.zip](https://github.com/cilium/cilium/files/12176846/cilium-sysdump-20230726-230133.zip) It seems that I need to downgrade or...
> It's hard to say your blackbox-exporter issue is relevant to this one from your sysdump. What do you mean by `will not be able to ping things`? The whole...
> What's your destination for that ICMPv6 ping? What I don't understand here is why the Pod picks link-local address as a source. That would be any of the a.fi...
> Could you show me your cilium-config ConfigMap? `kubectl -n kube-system get cm cilium-config -o yaml`. Values are at: https://github.com/samip5/k8s-cluster/blob/88ec9dbae52af3c675a33119ad26032475e5b762/cluster/apps/system/cilium/app/helm-release.yaml ```yaml apiVersion: v1 data: agent-not-ready-taint-key: node.cilium.io/agent-not-ready arping-refresh-period: 30s auto-direct-node-routes: "true"...