Ecosyste.ms: Timeline
Browse the timeline of events for every public repo on GitHub. Data updated hourly from GH Archive.
jaredledvina pushed 65 commits to main DataDog/cilium
- policy: reduce test boilerplate For all the tests that compare a rule against a desired L4Policy, make a few helper ... 12220db
- policy: tests: stop using SearchContext (l4_filter) This converts the SearchContext based tests to using the same co... fda9b7f
- policy: remove SearchContext (misc files) This removes SearchContext from a few miscellaneous tests. Signed-off-by:... 3769727
- pkg/policy: remove SearchContext [repository_test] This removes the deprecated SearchContext-based tests from reposi... c8404a6
- pkg/policy: remove tracing tests These tests rely on unused functionality (SearchContext-based match checking) and a... 7c231b2
- pkg/policy: remove unused methods There were some public methods that simulated the policy engine, but not at the ri... e7d659c
- Revert "k8s: Debounce service events" This reverts commit 82effe0eddbda0b98399c96d5f40ba221ee5d547. Signed-off-by: ... 1ad29be
- Revert "k8s: Use Old{Service,Endpoints} in delete events" This reverts commit 96cd107e128dd9715a503741ee042466f82121... 7a37378
- daemon/k8s: Add Table[LocalPod] Signed-off-by: Jussi Maki <[email protected]> 31708b0
- daemon/k8s: Replace Resource[Pod] with Table[LocalPod] As the first conversion of Resource[T] to Table[T], refactor ... 6a4fe9c
- helm: fix comment mangling hubble export options In https://github.com/cilium/cilium/pull/36974 (d57500ec1bbc3acf8f6... 7218025
- hubble-export: fix allowlist and denylist flow-filters parsing Hubble export allow/deny list parsing regressed in ht... cb3341b
- bgpv1: Extend adverts tests duration timeout GoBGP uses 5s IdleHoldTimer, which delays further connection attempts i... 66f304a
- ci, scale: Add EGW masquerade delay scale test This commit introduces a new scale test for Egress Gateway. At a high... 6bbcaa8
- nodeinit: move kubelet restart inside if/else in startup.bash Moving the kubelet restart commands into specific cond... facc9dc
- fix(deps): update module github.com/aws/aws-sdk-go-v2/service/ec2 to v1.201.0 Signed-off-by: cilium-renovate[bot] <1... 9526c43
- test: drop no-op -cilium,provision-k8s flag Setting the SKIP_K8S_PROVISION environment variable no longer has any ef... b0125f5
- xDS cache: Export TX method Signed-off-by: Aleksander Mistewicz <[email protected]> be2c9c0
- xDS client: Add @cilium/envoy to CODEOWNERS Signed-off-by: Aleksander Mistewicz <[email protected]> a74c142
- Add experimental version of xDS client Signed-off-by: Katarzyna Lach <[email protected]> c92c2a7
- and 45 more ...
jaredledvina created a review on a pull request on seabird-chat/seabird-plugin-bundle
Solving the real problems 🚀
jaredledvina pushed 1 commit to v1.15 DataDog/cilium
- gha: Fix feature test artifact upload This is to fix make sure the features tested file artifact is upload, two chan... 5751a66
jaredledvina pushed 1 commit to v1.14 DataDog/cilium
- chore(deps): update all github action dependencies Signed-off-by: cilium-renovate[bot] <134692979+cilium-renovate[bo... 562c422
jaredledvina created a tag on DataDog/cilium
1.16.6-dd1 - API Aware Networking and Security using BPF and XDP
jaredledvina pushed 124 commits to v1.16-dd DataDog/cilium
- policy: Reject CNP when ExceptCIDRs is used with CIDRGroupRef Since the usage of ExceptCIDRs is not supported in con... 397a2eb
- chore(deps): update docker.io/library/busybox:1.36.1 docker digest to 7c3c3ce Signed-off-by: cilium-renovate[bot] <1... f52af76
- chore(deps): update stable lvh-images Signed-off-by: cilium-renovate[bot] <134692979+cilium-renovate[bot]@users.nore... ab5fd18
- chore(deps): update docker.io/library/golang:1.22.10 docker digest to 9855006 Signed-off-by: cilium-renovate[bot] <1... c731045
- images: update cilium-{runtime,builder} Signed-off-by: Cilium Imagebot <[email protected]> affd497
- chore(deps): update all github action dependencies Signed-off-by: cilium-renovate[bot] <134692979+cilium-renovate[bo... 1ce105e
- gh: e2e-upgrade: use 6.12 kernel for netkit test configs Use the latest LTS kernel for testing with netkit mode. Thi... e13f19f
- metrics/features: introduce features package to track enable features [ upstream commit 7a5852f3cf31bd3cfc9d81991f1f... d88e654
- metrics/features: track IPAM mode [ upstream commit cbe7de20d07ee76317fc3fe58937716f5eda5e6a ] Track which IPAM mod... fc475b8
- metrics/features: track CNI chaining mode [ upstream commit f70e9c29c1e5cf4809f407992e26f483e48c70b8 ] Track which ... 4e0f03f
- metrics/features: enable IP protocol modes [ upstream commit ae22bd15a1dc9b2b04fc06e3c031717468d46aac ] Track which... 5523eea
- metrics/features: enable Identity Allocation mode [ upstream commit 0ce2d6807657470133faa9669bce234929763857 ] Trac... e4e444a
- metrics/features: enable CES [ upstream commit f05c6126a767951acb0a13d56ec88a6f93ca8b3d ] Track if CiliumEndpointSl... 128cabe
- metrics/features: enable device mode [ upstream commit 02b7c4e75332290217d6715ae421055ea02c89e1 ] Track which devic... 8332c9b
- .github/workflows: report which features are being used in CI [ upstream commit a23106d28619508d5a4e731a6b0cdd5771b4... f7cb161
- metrics/features/operator: introduce features package to track enable features [ upstream commit 14963732ba0d0a0a2d4... 41d496a
- metrics/features/operator: enable Ingress Controller [ upstream commit dafc22887edf8cbec9a42d417d703a91c62cc80c ] T... 5684c9e
- metrics/features/operator: enable LBIPAM [ upstream commit 156b1f735162bfe2597c661e65f861389c6ed014 ] Track if LBIP... e44b652
- metrics/features/operator: enable L7AwareTrafficManagement [ upstream commit c2617c99afe3070c17ff355c746c64aa21cc3d8... f7c88f5
- metrics/features/operator: enable NodeIPAM [ upstream commit cc6a9a804afbc3413ebbd08fe24c5fd8b1068ea6 ] Track if No... 6ea5603
- and 104 more ...
jaredledvina created a tag on DataDog/cilium
1.15.13-dd1 - API Aware Networking and Security using BPF and XDP
jaredledvina pushed 5 commits to main DataDog/cilium
- Documentation: tighten up toServices documentation Now that toServices can reference all kinds of services, this nee... 2f5f4ad
- policy/api: clarfiy ToServices docblocks. Remove the now-incorrect restriction that k8s services cannot have selecto... 8f91ed7
- Makefile: Increase timeout for integration tests to 12min We're running very close to the 10min in most CI runs and ... 49127f9
- experimental: Fix capture of txn in getBackendsForFrontend The [txn] was captured by the returned iterator in getBac... 0f02de9
- experimental: Pick loopback address from process pid This makes the healthserver.txtar flake free: 1h33m10s: 258479 ... 7b5d161
jaredledvina pushed 97 commits to v1.15-dd DataDog/cilium
- gh: e2e-upgrade: de-renovate the config example [ upstream commit e85ba782d3319cf87e5072c8c5e6d7d6a9d56ebd ] [ Back... 1c390af
- docs: CiliumNetworkPolicies toCIDRSet correct description [ upstream commit daea10fa8ecf00c6248dc22df9b87937e039d431... 4865735
- Use bash syntax to consume env variable - Also change the GitHub secret names Signed-off-by: Feroz Salam <feroz.sal... 5d73568
- gha: Use ubuntu-24.04 for integration-test [ upstream commit 5fa3060b67af2468db8583183ef9940230bc4e1d ] Relates: ht... df58c70
- install: Update image digests for v1.15.12 Generated from https://github.com/cilium/cilium/actions/runs/12359146888 ... 440b36c
- .github: Extract Clang from cilium-builder images [ upstream commit 726a93b559f91d0dac11bd234437fb2005aadcb6 ] Curr... 6a55217
- ci: update complexity-test images Manually update them now that LLVM is extracted from the cilium-builder image and ... 843112f
- chore(deps): update all-dependencies Signed-off-by: cilium-renovate[bot] <134692979+cilium-renovate[bot]@users.norep... fdda7a7
- gha: use /test to trigger tests in stable branches Historically, Jenkins required the usage of a different trigger p... 930db1f
- fix(deps): update module golang.org/x/net to v0.33.0 [security] Signed-off-by: cilium-renovate[bot] <134692979+ciliu... aa35072
- .github: Remove CI Fuzz workflow We are currently primarily focusing fuzz testing on the main branch, and since all ... 92234c6
- gha: bump ubuntu version in conformance-externalworkloads The conformance external workloads workflow recently start... 91f0f9b
- chore(deps): update dependency cilium/cilium-cli to v0.16.23 Signed-off-by: cilium-renovate[bot] <134692979+cilium-r... b3d9db9
- daemon: newDaemon returns promise for *option.DaemonConfig. [ upstream commit 6fafdf9434e7bbf7ddfda65e2cc48c9dca0d45... e710204
- metrics/features: introduce features package to track enable features [ upstream commit 7a5852f3cf31bd3cfc9d81991f1f... 96c250c
- metrics/features: track IPAM mode [ upstream commit cbe7de20d07ee76317fc3fe58937716f5eda5e6a ] Track which IPAM mod... 1704dd2
- metrics/features: track CNI chaining mode [ upstream commit f70e9c29c1e5cf4809f407992e26f483e48c70b8 ] Track which ... 9264a66
- metrics/features: enable IP protocol modes [ upstream commit ae22bd15a1dc9b2b04fc06e3c031717468d46aac ] Track which... f241c25
- metrics/features: enable Identity Allocation mode [ upstream commit 0ce2d6807657470133faa9669bce234929763857 ] Trac... 9aa8eef
- metrics/features: enable CES [ upstream commit f05c6126a767951acb0a13d56ec88a6f93ca8b3d ] Track if CiliumEndpointSl... 77da38e
- and 77 more ...
jaredledvina pushed 14 commits to main DataDog/cilium
- pkg/endpoint: reduce missed-policy-update severity when safe Normally we warn if, somehow, the policy state machine ... 6380e52
- experimental: Fix nodeport-addr.txtar The previous fix for the merge race ended up with the wrong expected output, e... 0e8f407
- chore(deps): update docker.io/library/golang:1.23.5 docker digest to 8c10f21 Signed-off-by: cilium-renovate[bot] <13... f84e4ad
- images: update cilium-{runtime,builder} Signed-off-by: Cilium Imagebot <[email protected]> c0fbeee
- tables: deflake direct routing device test Change the test to be independent of the passage of time, since time is a... 6c6b5e5
- cli: Add support for helm --max-history command line option By using this flag and same default as the upstream Helm... f19ffc6
- fix: SetLbAlg and SetSessionAffinityTimeoutSec This corrects the implementation of SetLbAlg() and SetSessionAffinity... d1d317f
- experimental: Add LBALG to DumpLBMaps This adds LBALG to DumpLBMaps in preparation for adding support for Per-servic... 4158fcb
- experimental: Per service lb algorithm selection This adds the feature from CFP-34577 to StateDB-based load balancin... 0f838a4
- experimental, test: Per svc lb algorithm selection This commit adds new tests for the support of Per-service Load Ba... 377d5e3
- experimental: BEID stringified based on union case This changes format of BPF dumps in tests. BackendID is stored in... 8ee2092
- lbmap: Add GetL7LBProxyPort to ServiceValue This is not to avoid using GetBackendID for L7 Proxy in order to handle ... 0c697b0
- experimental: Add svc lb alg annotation getter As requested in code review, this adds method GetLBAlgorithmAnnotatio... 441f7e1
- README: Update releases Signed-off-by: André Martins <[email protected]> da69c87
jaredledvina pushed 22 commits to v1.15 DataDog/cilium
- chore(deps): update quay.io/cilium/certgen docker tag to v0.1.17 Signed-off-by: cilium-renovate[bot] <134692979+cili... 203b0e3
- chore(deps): update all github action dependencies Signed-off-by: cilium-renovate[bot] <134692979+cilium-renovate[bo... bbeb960
- chore(deps): update actions/setup-go action to v5.3.0 Signed-off-by: cilium-renovate[bot] <134692979+cilium-renovate... 7f469b8
- install: Update image digests for v1.15.13 Generated from https://github.com/cilium/cilium/actions/runs/12895836280 ... d3a16e6
- envoy: Bump envoy version to v1.31.x This is as part of regular maintenance as Envoy v1.30 will be EOL in 3 months. ... 44b9857
- chore(deps): update quay.io/cilium/cilium-envoy docker tag to v1.31.5-1737535524-fe8efeb16a7d233bffd05af9ea53599340d3... a3fef35
- chore(deps): update dependency cilium/little-vm-helper to v0.0.20 Signed-off-by: cilium-renovate[bot] <134692979+cil... fa8e650
- chore(deps): update dependency cilium/hubble to v1.16.6 Signed-off-by: cilium-renovate[bot] <134692979+cilium-renova... 3c34f93
- ci: bpftrace skip tracking connections outside pod CIDRs [ upstream commit c835ca8ee8ed81e9ca5ad886d4d21858ff138257 ... d824c73
- conformance-ipsec-e2e: do not split egress-gateway tests [ upstream commit a6ea74822fc4be9354674967b43327a6e2e14f3b ... d1b864d
- ci: ipsec: rename trace_override variable in bpftrace script [ upstream commit 36e1ece1cd22a3346cd981cabc3b6ab96296c... 6010344
- gh: update removed --loglevel option for kind [ upstream commit 2b61fd7a3e6098f791b58d3743a0e26d16b6c524 ] Renovate... 18cb489
- docs: pass current_version to html_context [ upstream commit d51ab666eb95c892eeb0463003e9dc6353e62a0d ] Signed-off-... be7adb2
- ci: skip plain-text TCP RST packets in bpftrace [ upstream commit 09551d20aa60675020d3c190f5a7a75d688b720d ] In #35... 80a6e8f
- doc: Removed nodeinit from aksbyocni install [ upstream commit 4927820129cb9b8fa5fc3b1fd7332fecaca5f4d1 ] [ backpor... a523f31
- test: Move demo-httpd from Docker to Quay [ upstream commit bd474071bb52ac2b0f620ade2570f71bf285e512 ] Problems man... 3957053
- chore(deps): update go to v1.23.5 Signed-off-by: cilium-renovate[bot] <134692979+cilium-renovate[bot]@users.noreply.... 68c594f
- images: update cilium-{runtime,builder} Signed-off-by: Cilium Imagebot <[email protected]> ee0f174
- test/k8s: always unmap v4-in-v6 addresses [upstream commit 4c0b9f73dfc3211109a35d78a90716cf82bcf588] Parsing the ad... 06f44c7
- chore(deps): Bump golangci-lint to v1.60.1 The main reason is that old golangci-lint didn't work with go 1.23. This ... 3fd9c85
- and 2 more ...
jaredledvina pushed 19 commits to v1.14 DataDog/cilium
- chore(deps): update quay.io/cilium/certgen docker tag to v0.1.17 Signed-off-by: cilium-renovate[bot] <134692979+cili... b0e1177
- chore(deps): update all github action dependencies Signed-off-by: cilium-renovate[bot] <134692979+cilium-renovate[bo... 03e86b7
- chore(deps): update actions/setup-go action to v5.3.0 Signed-off-by: cilium-renovate[bot] <134692979+cilium-renovate... 6a8b72e
- install: Update image digests for v1.14.19 Generated from https://github.com/cilium/cilium/actions/runs/12895821815 ... c759d5e
- envoy: Bump envoy version to v1.31.x This is as part of regular maintenance as Envoy v1.30 will be EOL in 3 months. ... 50bb748
- ci: bpftrace skip tracking connections outside pod CIDRs [ upstream commit c835ca8ee8ed81e9ca5ad886d4d21858ff138257 ... 7b5bdf2
- conformance-ipsec-e2e: do not split egress-gateway tests [ upstream commit a6ea74822fc4be9354674967b43327a6e2e14f3b ... 92bd61f
- ci: ipsec: rename trace_override variable in bpftrace script [ upstream commit 36e1ece1cd22a3346cd981cabc3b6ab96296c... 59a0f66
- gh: update removed --loglevel option for kind [ upstream commit 2b61fd7a3e6098f791b58d3743a0e26d16b6c524 ] Renovate... 9adfdce
- docs: pass current_version to html_context [ upstream commit d51ab666eb95c892eeb0463003e9dc6353e62a0d ] Signed-off-... 742cee3
- ci: skip plain-text TCP RST packets in bpftrace [ upstream commit 09551d20aa60675020d3c190f5a7a75d688b720d ] In #35... 4579554
- chore(deps): update quay.io/cilium/cilium-envoy docker tag to v1.31.5-1737535524-fe8efeb16a7d233bffd05af9ea53599340d3... 9471b2a
- chore(deps): update dependency cilium/hubble to v1.16.6 Signed-off-by: cilium-renovate[bot] <134692979+cilium-renova... f9f7f72
- chore(deps): update dependency cilium/little-vm-helper to v0.0.20 Signed-off-by: cilium-renovate[bot] <134692979+cil... 11dffe5
- chore(deps): update go to v1.23.5 Signed-off-by: cilium-renovate[bot] <134692979+cilium-renovate[bot]@users.noreply.... 3c97933
- test/k8s: always unmap v4-in-v6 addresses [upstream commit 4c0b9f73dfc3211109a35d78a90716cf82bcf588] Parsing the ad... afdf787
- chore(deps): Bump golangci-lint to v1.60.1 The main reason is that old golangci-lint didn't work with go 1.23. This ... ff1a3c5
- images: update cilium-{runtime,builder} Signed-off-by: Cilium Imagebot <[email protected]> 356f7ef
- gha: Retrieve eks supported version via aws cli [ upstream commit 3ed77e7fb554be5789ce71f1b685a7eebfdba40e ] The la... 87f0ea4
jaredledvina opened an issue on cilium/cilium
CiliumNetworkPolicy CRD validation doesn't enforce not using ToServices & ToPorts together
### Is there an existing issue for this? - [x] I have searched the existing issues ### Version equal or higher than v1.16.5 and lower than v1.17.0 ### What happened? Currently, the CiliumNetwo...
jaredledvina pushed 6 commits to v1.16 DataDog/cilium
- gh: e2e-upgrade: add coverage for 6.6 kernel [ upstream commit d00e94d61156ccf5c2326ea183a38f7627567606 ] [ backpor... 58e5ce0
- Prepare for release v1.16.6 Signed-off-by: Cilium Release Bot <[email protected]> 84735f3
- chore(deps): update all-dependencies Signed-off-by: cilium-renovate[bot] <134692979+cilium-renovate[bot]@users.norep... 143dabb
- images: update cilium-{runtime,builder} Signed-off-by: Cilium Imagebot <[email protected]> a25faea
- chore(deps): update go to v1.22.11 Signed-off-by: cilium-renovate[bot] <134692979+cilium-renovate[bot]@users.noreply... 372abde
- images: update cilium-{runtime,builder} Signed-off-by: Cilium Imagebot <[email protected]> 41f994c
jaredledvina pushed 7 commits to v1.15 DataDog/cilium
- gha: correctly downgrade to patch release in ipsec workflows [ upstream commit 963b5b2cfbb91bd93f0ad674ef1abebb7138f... 53876f1
- docs: Clarify Identity-Relevant Labels description [ upstream commit fceab4f0f232385424f2afcd38a2947630270630 ] [ ba... e322bd8
- envoy: Demote expected initial fetch timeout warning to info level [upstream 8f6fe610623b4bbfd7d1ad73f2a339a40c9f0f7... 6b4c828
- Prepare for release v1.15.13 Signed-off-by: Cilium Release Bot <[email protected]> 1d896ca
- chore(deps): update all-dependencies Signed-off-by: cilium-renovate[bot] <134692979+cilium-renovate[bot]@users.norep... 34d70c0
- chore(deps): update go to v1.22.11 Signed-off-by: cilium-renovate[bot] <134692979+cilium-renovate[bot]@users.noreply... 42043cf
- images: update cilium-{runtime,builder} Signed-off-by: Cilium Imagebot <[email protected]> a79a66d
jaredledvina pushed 8 commits to v1.14 DataDog/cilium
- gha: correctly downgrade to patch release in ipsec workflows [ upstream commit 963b5b2cfbb91bd93f0ad674ef1abebb7138f... 69169b9
- gha: bump ubuntu version in conformance-externalworkloads [ upstream commit 3fe873c1024783be78d190d7337bb17e1154972e... f4ed894
- Prepare for release v1.14.19 Signed-off-by: Cilium Release Bot <[email protected]> cb11139
- ci: Fix fetching tested features and uploading artifacts Seems like we were never fetching features tested and thus ... 93ada31
- envoy: Demote expected initial fetch timeout warning to info level [upstream 8f6fe610623b4bbfd7d1ad73f2a339a40c9f0f7... 114a022
- chore(deps): update quay.io/cilium/cilium-envoy docker tag to v1.30.9-1737073743-40a016d11c0d863b772961ed0168eea6fe6b... 2fcf7a4
- chore(deps): update go to v1.22.11 Signed-off-by: cilium-renovate[bot] <134692979+cilium-renovate[bot]@users.noreply... e292ff8
- images: update cilium-{runtime,builder} Signed-off-by: Cilium Imagebot <[email protected]> b812c11
jaredledvina pushed 241 commits to hmalla/empty_ipconfigs DataDog/cilium
- fix(deps): update module golang.org/x/net to v0.33.0 [security] Signed-off-by: cilium-renovate[bot] <134692979+ciliu... 7bd9d40
- fix(deps): update aws-sdk-go-v2 monorepo Signed-off-by: cilium-renovate[bot] <134692979+cilium-renovate[bot]@users.n... 12913b7
- fix(deps): update opentelemetry-go monorepo to v1.33.0 Signed-off-by: cilium-renovate[bot] <134692979+cilium-renovat... 1576e99
- chore(deps): update all lvh-images main Signed-off-by: cilium-renovate[bot] <134692979+cilium-renovate[bot]@users.no... d5a0993
- vendor: bump ebpf-go to 0.17.1 Signed-off-by: Timo Beckers <[email protected]> 2b2355b
- fix(deps): update all go dependencies main Signed-off-by: cilium-renovate[bot] <134692979+cilium-renovate[bot]@users... 9ba52b2
- cilium-cli: add external-other-target arg to connectivity tests Allow overriding the "blocked" domain in the test us... dca99d5
- bugtool: remove k8s-mode This commit removes the deprecated k8s-mode from the bugtool. Signed-off-by: Marco Hofstet... c03dee5
- bugtool: remove copyStateDirCommands from ciliumInfoCommands Signed-off-by: Marco Hofstetter <marco.hofstetter@isova... cd65743
- bugtool: split ciliumInfoCommands into dbg and health Signed-off-by: Marco Hofstetter <[email protected]> ce993a2
- bugtool: refactor withHostFlag Signed-off-by: Marco Hofstetter <[email protected]> a8e2cf0
- bugtool: refactor tcInterfacecommands Signed-off-by: Marco Hofstetter <[email protected]> f853631
- bugtool: move bpfmappaths into global var Signed-off-by: Marco Hofstetter <[email protected]> 68994b0
- bugtool: extract miscSystemCommands into separate function Signed-off-by: Marco Hofstetter <marco.hofstetter@isovale... 7188c9c
- bugtool: extract bpfCgroupCommands into separate function Signed-off-by: Marco Hofstetter <marco.hofstetter@isovalen... 5d5f4c7
- Doc: Auto BGP router-id allocation for IPv6 Cilium start to support auto router-id allocation using MAC address for ... eaf3ede
- gh: e2e-upgrade: don't skip upgrade for netkit configs Upgrade testing between main and v1.17 should be safe now. S... a5bc909
- gh: e2e-upgrade: enable HostFW in config 5 Assume that all remaining issues with missed tail calls are resolved, and... 2c9a6da
- ingress: Add json tag for fields in ingress model This will simplify when marshaling the object to file. Signed-off... 9002fa2
- ingress: Convert translation test to file based This will reduce the effort on writing/debugging tests compared to g... db4f741
- and 221 more ...
jaredledvina pushed 2 commits to main DataDog/cilium
jaredledvina pushed 42 commits to main DataDog/cilium
- docs: Deprecate Requires Fields The toRequires and fromRequires fields cause confusion and are not apparently useful... 4b61a2b
- bpf: Makefile improvement The commit allows populating debug context and verbosity level for the bpf test from root ... 86a8e14
- pkg/maps/nat/stats: cleanup: remove nth index from nat-stats. Previous commits already removed setting the nth value... 70c4214
- clustermesh: Add --allow-unsafe-policy-skb-usage This hidden flag can allow existing users who are using a high clus... 4249c5d
- helm: Support extraConfig.allowUnsafePolicySKBUsage Let the user configure the new quirks.allowUnsafePolicySKBUsage ... 890ea7a
- Remove "_count" suffix from doublewrite metrics Signed-off-by: Anton Ippolitov <[email protected]> 2fc148d
- treewide: Remove deprecated high-scale ipcache code The high-scale ipcache feature never made it out of beta and was... 0addb32
- docs: Document the removal of high-scale ipcache The feature was removed in the previous commit. Signed-off-by: Pau... 7d51e19
- test: remove unused registry-adder chart This is no longer used after the last remains of the Jenkins/vagrant based ... 94a5461
- docs: pass current_version to html_context Signed-off-by: Andrii Iuspin <[email protected]> d51ab66
- bitlpm: Use Key[K] as a type constraint Use Key[K] as a type constraint, rather than the type of the stored key, or ... c9abe9d
- bitlpm: Remove the Iterator interface Remove the Iterator interface and return the implementation of the iterator di... e4871c9
- policy: Simplify mapState.upsert Signed-off-by: Jarno Rajahalme <[email protected]> 7469f86
- policy: Fix comments Fix mispelling of 'mapStateEntry' and commenta in LPMAncestors(). Signed-off-by: Jarno Rajahal... b8b458c
- policy: Remove mapstate owner tracking The set of MapStateEntry owners was added to keep track of which selectors ne... 14db167
- policy: Block incremental deletion of mutated identities The host identity can be mutated, e.g., when the kube-apise... 5710ac4
- policy: Rename newMapState() as emptyMapState() Signed-off-by: Jarno Rajahalme <[email protected]> 09ea9ee
- policy: Prealloc mapstate using previous size Reduce allocations and memory use by preallocating the mapstate map wi... e66308d
- policy: Remove unused parameter from test code Remove unused 'epLabels' parameter from 'policyDistillery.distillPoli... a73ddd5
- labels: Remove debug printfs Signed-off-by: Jarno Rajahalme <[email protected]> d97f299
- and 22 more ...
jaredledvina created a comment on a pull request on cilium/cilium
👋 Anton is on holiday at the moment but, I've just rebased this branch off of the latest of `main` and pushed it. Hopefully that unsticks the CI issues @julianwiedmann
jaredledvina pushed 375 commits to ai/doublewrite-metrics-remove-count-suffix DataDog/cilium
- daemon: disable dependent bpf-sock-lb options if bpf-sock-lb=false Socket LB tracing and support for getpeername are... 0d5f9e3
- Don't mark KVstoreLeaseTTL flag as hidden Depending on the deployment scenario, tuning kvstore(etcd) lease TTL can b... 8891ced
- cilium-cli: Add support for testing with multiple parallel curl requests Add new 'connectivity test' option '--curl-... 311ce40
- envoy: Increase per-cluster concurrent retry limit Envoy default limit on concurrent retries on a cluster is 3. This... 70a4979
- helm: Expose '--http-retry-count' Envoy HTTP retry count defaults to 3. Expose it via helm value 'envoy.httpRetryCou... 550fdd6
- bpf: host: inline handle_netdev() into callers Make it easier to fine-tune the logic to the specific program it's be... c04251c
- bpf: host: improve drop notification in cil_from_netdev() Use the existing epilogue to emit the drop notification. T... a6c9614
- bpf: host: improve trace message in cil_from_netdev() The packet is most definitely not coming from HOST_ID. Instead... 195d7b9
- bpf: host: improve reported identities in cil_from_host() Hard-code the source identity as HOST_ID, rather than rely... a201b79
- bpf: host: move some IPsec code from do_netdev() to cil_from_netdev() This code is only used when the caller is cil_... 019b2f9
- vendor: Update cilium/stream package Bump cilium/stream to version v0.0.0-20241203114243-53c3e5d79744 Signed-off-by... 4ae4b17
- orchestrator: Use truncating chan as input for local node updates The orchestrator is in charge of reinitializing th... 2538362
- k8s: Bump k8s to v1.32.rc-2 Signed-off-by: Tam Mach <[email protected]> 6ae8a0a
- fix(deps): update all go dependencies main Signed-off-by: cilium-renovate[bot] <134692979+cilium-renovate[bot]@users... 8f1305f
- bpf: host: exit early when to-host handles to-proxy traffic When the to-host program handles traffic marked as MARK_... 521fb2a
- cilium-cli/connectivity: disable warning log checks before v1.17 Since commit 5417a3fa37bc ("cli/connectivity: Check... 60ed292
- chore: add versioning for drop notify messages Aligns the control-plane drop notify struct with the dataplane struct... befdbb4
- bpf: nodeport: forward L7 svc traffic straight to proxy L7 svc requests are currently redirected to cilium_net / cil... 1c7f706
- identity/cache: remove event chan from local allocators When an identity is allocated, it needs to be plumbed in to ... 71cebc7
- policy: always use incremental updates when new identity is learned Prior to this change, there were two possible wa... 22ed4dd
- and 355 more ...
jaredledvina pushed 54 commits to main DataDog/cilium
- README: Update releases Signed-off-by: Joe Stringer <[email protected]> e480310
- cilium-cli: do not print checkmarks for non-binary values When feature metrics have non-binary values, we don't need... b842a54
- ctmap: use sync.OnceValue to simplify batchAPISupported Use sync.OnceValue instead of sync.Once to simplify the code... c0279dd
- chore(deps): update all-dependencies Signed-off-by: cilium-renovate[bot] <134692979+cilium-renovate[bot]@users.norep... 5940fa0
- images: update cilium-{runtime,builder} Signed-off-by: Cilium Imagebot <[email protected]> e923c9f
- Update tls-default-certificate.rst removed the unnecessary '\\' line 38. Signed-off-by: Rachid Zarouali <xinity@use... 986541a
- Update tls-cert.rst update cert-manager installation as gatewayapi isn't anymore behind a featuregate Signed-off-by... 9c43545
- proxy: Mark restored port as configured Proxy port restored from a file upon Cilium restart port must be considered ... 121a920
- policy: Do not copy L7DataMap for proxy L7DataMap is not muted after the policy has been computed, so there is no re... e1675c4
- proxy: Only set/update L7 rules for DNS proxy Remove the storage of L7 rules for Redirect by returning revert functi... a3c36a6
- proxy: Simplify redirect composition Include the common/static Redirect config as a member in each RedirectImplement... 2713290
- chore(deps): update all github action dependencies Signed-off-by: cilium-renovate[bot] <134692979+cilium-renovate[bo... 2b315e7
- chore(deps): update all lvh-images main Signed-off-by: cilium-renovate[bot] <134692979+cilium-renovate[bot]@users.no... 0fa18b9
- fix(deps): update aws-sdk-go-v2 monorepo Signed-off-by: cilium-renovate[bot] <134692979+cilium-renovate[bot]@users.n... e311401
- chore(deps): update golangci/golangci-lint docker tag to v1.63.4 Signed-off-by: cilium-renovate[bot] <134692979+cili... f744cce
- renovate: pin renovate image version in config validator workflow Use a fixed tagged image version with digest to av... 2fb022e
- .github: fix API generation with renovate In some cases, base images may not be built, which blocks protobuf API reg... 8c29ef9
- renovate: add protocolbuffers/protobuf to trusted dependencies This is a well known dependency so we can trust it. ... 4493b81
- fix(deps): update all go dependencies main Signed-off-by: cilium-renovate[bot] <134692979+cilium-renovate[bot]@users... f2c7fe0
- conformance-ipsec-upgrade: run leak check after upgrade/downgrade Similarly as we do in conformance-ipsec-e2e, let's... d6d4081
- and 34 more ...
jaredledvina pushed 13 commits to v1.16 DataDog/cilium
- chore(deps): update all github action dependencies Signed-off-by: cilium-renovate[bot] <134692979+cilium-renovate[bo... fe3e98f
- chore(deps): update all-dependencies Signed-off-by: cilium-renovate[bot] <134692979+cilium-renovate[bot]@users.norep... 73142e1
- images: update cilium-{runtime,builder} Signed-off-by: Cilium Imagebot <[email protected]> 17513db
- check-ipsec-leak: output whether detected traffic is encapsulated [ upstream commit 3a73f24deabe87a5a658422fafdb2fd4... 2fc48a8
- check-ipsec-leak: output DNS query information when leaked [ upstream commit 40a4df784c961aee108a120b85c7daa294603b1... 1c27020
- check-ipsec-leak: output whether detected traffic matched an override [ upstream commit 483b00960d3a2bf4da5ddde150d1... 63cb463
- check-ipsec-leak: additionally output TCP flags [ upstream commit b780df6d7f2cef22b8091f460d3e93fb658d4377 ] Let's ... fb62c19
- pkg/redirectpolicy: Fix backend slices in processConfig [ upstream commit 055b7a32d5869420584f8fbb58c37cef06d2dd77 ]... 2b15ee4
- ui: drop CORS headers from api response [ upstream commit a3489f190ba6e87b5336ee685fb6c80b1270d06d ] Without CORS h... 71e386c
- helm: subnetTagsFilter/instanceTagsFilter should template to comma separated string [ upstream commit 5c08f9593c3e1c... 8ac7874
- Remove reference to DNS polling [ upstream commit ec4b7820c58d14527fdcf976c114de420a4800c8 ] DNS polling was deprec... c5a65fa
- doc: fix typo on kubeproxy-free (CEV -> CVE) [ upstream commit 550d2f5f431f75d64ae49c18007f9ec3138dc159 ] Signed-of... 0bf18e5
- build: Filter out --jobserver-auth from MAKEFLAGS [ upstream commit cdecbcbb97929fc685104f63cfb9bd3c570c7f5d ] GNU ... ebdb725
jaredledvina pushed 7 commits to v1.15 DataDog/cilium
- chore(deps): update all github action dependencies Signed-off-by: cilium-renovate[bot] <134692979+cilium-renovate[bo... 9fc37a6
- images: update cilium-{runtime,builder} Signed-off-by: Cilium Imagebot <[email protected]> c5de41e
- ui: drop CORS headers from api response [ upstream commit a3489f190ba6e87b5336ee685fb6c80b1270d06d ] Without CORS h... ae2b32c
- add ccache to the builder image [ upstream commit 0828e043ee0c11c0fbf56ef99158d402499b368f ] ccache can be used to ... c8b1b6d
- bpf: make BPF unit tests reproducible [ upstream commit 0b9b390e823274698b40f6b7c437441916d32c7e ] [ backporter's no... d5a30b9
- .github: Build documentation and BPF code in builder images [ upstream commit ade7f22ec5e646998a33791aae1d8155264bd6... 05100d3
- build: Filter out --jobserver-auth from MAKEFLAGS [ upstream commit cdecbcbb97929fc685104f63cfb9bd3c570c7f5d ] [ bac... 9e57490
jaredledvina pushed 15 commits to v1.14 DataDog/cilium
- images: update cilium-{runtime,builder} Signed-off-by: Cilium Imagebot <[email protected]> 61f80a1
- check-ipsec-leak: output whether detected traffic is encapsulated [ upstream commit 3a73f24deabe87a5a658422fafdb2fd4... fd62e14
- check-ipsec-leak: output DNS query information when leaked [ upstream commit 40a4df784c961aee108a120b85c7daa294603b1... 9ca4375
- check-ipsec-leak: output whether detected traffic matched an override [ upstream commit 483b00960d3a2bf4da5ddde150d1... 02fc824
- check-ipsec-leak: additionally output TCP flags [ upstream commit b780df6d7f2cef22b8091f460d3e93fb658d4377 ] Let's ... 502707f
- ui: drop CORS headers from api response [ upstream commit a3489f190ba6e87b5336ee685fb6c80b1270d06d ] Without CORS h... ff6ed79
- Remove reference to DNS polling [ upstream commit ec4b7820c58d14527fdcf976c114de420a4800c8 ] DNS polling was deprec... c88437a
- add ccache to the builder image [ upstream commit 0828e043ee0c11c0fbf56ef99158d402499b368f ] ccache can be used to ... 779d16f
- make: add "run-builder" target [ upstream commit b257fd50287ea6fa4cef41eec3d83c5f5a34c4c9 ] Add make target for run... bfa0635
- bpf,ci: Remove coverage collection from BPF tests [ upstream commit 61d19df0c00060c0085b4880c7aec5dd5fe23ead ] [ bac... 73fc1e7
- bpf,tests: Change makefile cache to rebuild on header changes [ upstream commit 49919dae73d8e61f081a10c61299f1bcf821... 2f739f4
- bpf: make BPF unit tests reproducible [ upstream commit 0b9b390e823274698b40f6b7c437441916d32c7e ] [ backporter's no... d2a31e8
- Makefile: declare CILIUM_BUILDER_IMAGE in Makefile.defs [ upsteam commit 5c35dc31c1acb0cba013f20a026c57e291573e55 ] ... c54369c
- .github: Build documentation and BPF code in builder images [ upstream commit ade7f22ec5e646998a33791aae1d8155264bd6... 49f6c9d
- build: Filter out --jobserver-auth from MAKEFLAGS [ upstream commit cdecbcbb97929fc685104f63cfb9bd3c570c7f5d ] [ bac... 84be7d9