cilium · Issues· 1087 open
Open on GitHubLocally synced open issues (discussions stay on GitHub)
- #33550
Dependency Dashboard
area/datapatharea/miscpinnedarea/agentUpdated Sep 18, 2026 - #25676
Cross-node Hubble flows don't contain Kubernetes workload name
kind/bugkind/community-reportpinnedarea/agentarea/hubbleUpdated Sep 18, 2026 - #47065
Reduce the footprint of the `cilium-agent` image
area/buildkind/cfparea/supply-chainUpdated Sep 18, 2026 - #48811
images/runtime: the Ubuntu base image's /usr/bin/pebble is the only Go 1.26.5 binary left in cilium:v1.20.2 (8 HIGH stdlib CVEs in a binary Cilium never runs) — bump the ubuntu:26.04 digest or drop the binary
kind/community-reportarea/buildarea/supply-chainUpdated Sep 18, 2026 - #47713
Support IPv4 link-local pod address allocation for egress NAT44 in IPv6-only pod networks
kind/featurekind/cfpUpdated Sep 17, 2026 - #48271
LoadBalancer Service: stale backend in eBPF map ~20-34s after pod deletion, independent of L2-announcement lease
kind/bugarea/datapathneeds/triagekind/community-reportarea/agentarea/loadbalancingUpdated Sep 17, 2026 - #45196
Cilium fails to properly write eBPF maps in some circumstances
kind/bugarea/loaderneeds/triagekind/community-reportinfo-completedUpdated Sep 17, 2026 - #42646
bpf: migrate branching config macros to runtime configuration
area/loaderarea/datapathkind/metapinnedUpdated Sep 17, 2026 - #48800
Cluster Mesh docs: workloads do not need a restart after a cluster ID/name change, but Hubble server certs do need regenerating
kind/bugneeds/triagekind/community-reportUpdated Sep 17, 2026 - #48799
Gateway API services no longer L2 announced in 1.20.2
kind/bugneeds/triagekind/community-reportUpdated Sep 17, 2026 - #48459
v1.19.7: intermittent pod to ClusterIP (kube-apiserver) timeouts on native routing with kube-proxy-replacement=false, node-dependent
kind/bugkind/community-reportarea/loadbalancingUpdated Sep 17, 2026 - #48794
Cilium connectivity tests with DNS egress rules are broken in Gardener Kubernetes clusters
kind/bugneeds/triagekind/community-reportUpdated Sep 17, 2026 - #48132
Gateway API host-network: changing a listener port wedges Envoy in a permanent NACK loop that survives all restarts
area/proxyneeds/triagekind/community-reportarea/agentarea/servicemeshfeature/k8s-gateway-apiUpdated Sep 17, 2026 - #48773
L7 regex NACK loop starves the agent API and blocks all pod creation on the node
kind/bugarea/proxysig/policykind/community-reportarea/agentUpdated Sep 17, 2026 - #48070
Host firewall: policy-selected node is permanently isolated after reboot — host endpoint policy map ends up deny-all (cold boot, audit-off flip) or allow-all (runtime label add), never the computed policy
kind/bugneed-more-infoneeds/triagesig/policykind/community-reportarea/host-firewallinfo-completedUpdated Sep 17, 2026