Search results

bpf: test: extend encryption test suite with tests for encrypted traffic

area/CIContinuous Integration testing issue or flakeContinuous Integration testing issue or flake

area/encryptionImpacts encryption support such as IPSec, WireGuard, or kTLS.Impacts encryption support such as IPSec, WireGuard, or kTLS.

kind/enhancementThis would improve or streamline existing functionality.This would improve or streamline existing functionality.

pinnedThese issues are not marked stale by our issue bot.These issues are not marked stale by our issue bot.

Status: Open.

Enhancement

#45599 In cilium/cilium;

· julianwiedmann opened on Apr 24, 2026

Cilium v1.19.3 incorrect value mapping unmanaged-pod-watcher-interval on helm chart

kind/bugThis is a bug in the Cilium logic.This is a bug in the Cilium logic.

kind/community-reportThis was reported by a user in the Cilium community, eg via Slack.This was reported by a user in the Cilium community, eg via Slack.

needs/triageThis issue requires triaging to establish severity and next steps.This issue requires triaging to establish severity and next steps.

Status: Open.

#45598 In cilium/cilium;

· Estarath opened on Apr 24, 2026

Helm: template fails to render when using clustermesh.apiserver.method: certmanager

kind/bugThis is a bug in the Cilium logic.This is a bug in the Cilium logic.

kind/community-reportThis was reported by a user in the Cilium community, eg via Slack.This was reported by a user in the Cilium community, eg via Slack.

needs/triageThis issue requires triaging to establish severity and next steps.This issue requires triaging to establish severity and next steps.

Status: Open.

#45577 In cilium/cilium;

· owayss opened on Apr 23, 2026

v1.18: CI: Integration Tests: pkg/ciliumidentity: TestUpdateUsedCIDIsReverted: controller_test.go:428: expected labels ...

affects/v1.18This issue affects v1.18 branchThis issue affects v1.18 branch

area/CIContinuous Integration testing issue or flakeContinuous Integration testing issue or flake

ci/flakeThis is a known failure that occurs in the tree. Please investigate me!This is a known failure that occurs in the tree. Please investigate me!

Status: Open.

#45571 In cilium/cilium;

· pippolo84 opened on Apr 23, 2026

CI: e2e-upgrade workflow is still getting scheduled runs on main

area/CIContinuous Integration testing issue or flakeContinuous Integration testing issue or flake

kind/bug/CIThis is a bug in the testing code.This is a bug in the testing code.

pinnedThese issues are not marked stale by our issue bot.These issues are not marked stale by our issue bot.

Status: Open.

Bug

#45566 In cilium/cilium;

· julianwiedmann opened on Apr 23, 2026

Server reply SYN,ACK packets to Envoy are dropped when using L7 rules and host firewall

area/datapathImpacts bpf/ or low-level forwarding details, including map management and monitor messages.Impacts bpf/ or low-level forwarding details, including map management and monitor messages.

area/host-firewallImpacts the host firewall or the host endpoint.Impacts the host firewall or the host endpoint.

kind/bugThis is a bug in the Cilium logic.This is a bug in the Cilium logic.

kind/community-reportThis was reported by a user in the Cilium community, eg via Slack.This was reported by a user in the Cilium community, eg via Slack.

needs/triageThis issue requires triaging to establish severity and next steps.This issue requires triaging to establish severity and next steps.

Status: Open.

#45565 In cilium/cilium;

· Jaakkonen opened on Apr 23, 2026

batch map lookup is not efficient when the number of elements are small

area/datapathImpacts bpf/ or low-level forwarding details, including map management and monitor messages.Impacts bpf/ or low-level forwarding details, including map management and monitor messages.

kind/bugThis is a bug in the Cilium logic.This is a bug in the Cilium logic.

kind/community-reportThis was reported by a user in the Cilium community, eg via Slack.This was reported by a user in the Cilium community, eg via Slack.

kind/performanceThere is a performance impact of this.There is a performance impact of this.

Status: Open.

#45564 In cilium/cilium;

· wenjianhn opened on Apr 23, 2026

gateway-api: routes rejected when using multiple listeners with allowedRoutes

area/agentCilium agent related.Cilium agent related.

feature/k8s-gateway-api

kind/bugThis is a bug in the Cilium logic.This is a bug in the Cilium logic.

kind/community-reportThis was reported by a user in the Cilium community, eg via Slack.This was reported by a user in the Cilium community, eg via Slack.

needs/triageThis issue requires triaging to establish severity and next steps.This issue requires triaging to establish severity and next steps.

Status: Open.

#45559 In cilium/cilium;

· eufriction opened on Apr 23, 2026

datapath: improve usage of revalidate_data_pull()

area/datapathImpacts bpf/ or low-level forwarding details, including map management and monitor messages.Impacts bpf/ or low-level forwarding details, including map management and monitor messages.

kind/enhancementThis would improve or streamline existing functionality.This would improve or streamline existing functionality.

pinnedThese issues are not marked stale by our issue bot.These issues are not marked stale by our issue bot.

Status: Open.

Task

#45542 In cilium/cilium;

· julianwiedmann opened on Apr 22, 2026

WireGuard nodeEncryption: host-bound decrypted traffic still dropped on v1.20.0-pre.1 (IPv6-only), despite #42892

area/datapathImpacts bpf/ or low-level forwarding details, including map management and monitor messages.Impacts bpf/ or low-level forwarding details, including map management and monitor messages.

area/encryptionImpacts encryption support such as IPSec, WireGuard, or kTLS.Impacts encryption support such as IPSec, WireGuard, or kTLS.

feature/wireguardRelates to Cilium's Wireguard featureRelates to Cilium's Wireguard feature

kind/bugThis is a bug in the Cilium logic.This is a bug in the Cilium logic.

kind/community-reportThis was reported by a user in the Cilium community, eg via Slack.This was reported by a user in the Cilium community, eg via Slack.

needs/triageThis issue requires triaging to establish severity and next steps.This issue requires triaging to establish severity and next steps.

Status: Open.

#45497 In cilium/cilium;

· yaronr opened on Apr 20, 2026

Sporadic tftp test traffic flake with traffic SNATted to the Cilium VxLAN port 8472 getting black-holed on return

area/CIContinuous Integration testing issue or flakeContinuous Integration testing issue or flake

area/loadbalancingImpacts load-balancing and Kubernetes service implementationsImpacts load-balancing and Kubernetes service implementations

ci/flakeThis is a known failure that occurs in the tree. Please investigate me!This is a known failure that occurs in the tree. Please investigate me!

sig/policyImpacts whether traffic is allowed or denied based on user-defined policies.Impacts whether traffic is allowed or denied based on user-defined policies.

Status: Open.

Bug

#45492 In cilium/cilium;

· jrajahalme opened on Apr 20, 2026

CI: Cilium E2E - timeout reached waiting for deployment cilium-test-1/test-conn-disrupt-server to become ready

area/CIContinuous Integration testing issue or flakeContinuous Integration testing issue or flake

ci/flakeThis is a known failure that occurs in the tree. Please investigate me!This is a known failure that occurs in the tree. Please investigate me!

Status: Open.

#45453 In cilium/cilium;

· mathpl opened on Apr 17, 2026