Tam Mach

/test

/test

/test

/test

This will be very nice improvement

Seems like there is no support for CA TTL right now, can you try the below if it helps ? ```diff diff --git a/install/kubernetes/cilium/templates/spire/server/configmap.yaml b/install/kubernetes/cilium/templates/spire/server/configmap.yaml index d73475951b..afb4af83a9 100644 --- a/install/kubernetes/cilium/templates/spire/server/configmap.yaml...

Thanks for your comment. On the hair-pinning issue, can you share cilium config map as it might be fixed as part of #32367? Thanks.

> Here's my cilium cm Can you give it a try with the image from below PR? Seems like you are having bpf.masquerade enabled, one additional config `bpf.hostLegacyRouting=true` could be...

Upon investigating this issue, I found out that endpoint IP is not bumped to Envoy due to below code block, which skipped further processing of Service. https://github.com/cilium/cilium/blob/07dea5d1da0337ff2e5c27ef993a1e8f5fa41047/pkg/k8s/watchers/watcher.go#L902-L904 Seems like it's...

yes, I am marking the above PR as draft to add e2e test.