tag: Cilium · 13 items
- Platform/SRE — Learn: Pre-GA release of the Cilium CNI; notable upcoming changes include a new LB IPAM IP-sharing annotation for mixed-pod services and a fix for BGP route advertisement racing BPF attachment on node reboot — worth tracking before the GA upgrade cycle.
- CI/CD — Skip
- Leader — Skip
- Signals: deprecation mentioned (no explicit date found)
- Platform/SRE — Learn: Pre-GA release of Cilium 1.21.0; worth monitoring the release notes as 1.21 approaches GA to evaluate upcoming CNI/eBPF changes, but no action until a stable release lands.
- CI/CD — Skip
- Leader — Skip
- Platform/SRE — Plan: Cilium 1.20 is a GA minor release of a CNI/service-mesh stack platform teams operate directly; new ENI IPAM for IPv6 and Gateway API ExternalAuth are worth evaluating for adoption this quarter, and the TCPRoute/UDPRoute additions may change how non-HTTP traffic routing is architected on the cluster.
- CI/CD — Skip
- Leader — Skip
- Platform/SRE — Learn: Cilium 1.21 is in pre-release; worth tracking for upcoming CNI changes, but no action warranted until GA.
- CI/CD — Skip
- Leader — Skip
- Platform/SRE — Learn: Pre-GA release of Cilium 1.21 introduces notable features like BPF masquerading on by default and SR-IOV device manager support — worth tracking for planning a future upgrade, but not actionable until GA.
- CI/CD — Skip
- Leader — Skip
- Platform/SRE — Learn: Pre-GA release of Cilium 1.21.0; worth tracking for upcoming features in the eBPF-based CNI, but not actionable until GA.
- CI/CD — Skip
- Leader — Skip
- Platform/SRE — Learn: Pre-release of the next Cilium minor version; worth tracking the changelog as 1.21 matures, but no action until GA.
- CI/CD — Skip
- Leader — Skip
- Platform/SRE — Learn: Pre-GA release of Cilium 1.21.0 introduces delta-split Envoy xDS mode for lower CPU/latency and deprecates WireGuard Node Encryption — worth tracking for the eventual stable release, but no action warranted yet.
- CI/CD — Skip
- Leader — Skip
- Signals: deprecation mentioned (no explicit date found)
- Platform/SRE — Learn: Early pre-release of Cilium 1.21; worth tracking for upcoming CNI/eBPF features but not yet GA — no action on production clusters.
- CI/CD — Skip
- Leader — Skip
- Platform/SRE — Plan: Cilium 1.20.0 is a substantial GA minor release for a core CNI component; before upgrading, audit whether your cluster uses legacy Mutual Authentication, Envoy Go extensions, Kafka-aware policies, the cilium.io/v2alpha1 CiliumNodeConfig API, libnetwork, or custom CNI configs — all require migration steps per the upgrade guide. No forced-upgrade deadline exists, so schedule evaluation this quarter.
- CI/CD — Skip
- Leader — Skip
- Platform/SRE — Learn: Cilium is a core CNI/eBPF network policy component that platform engineers operate directly; a new minor GA release warrants reviewing the full changelog for breaking changes or notable capabilities, but the summary is too thin to justify a planned upgrade without knowing what changed.
- CI/CD — Skip
- Leader — Skip
- Platform/SRE — Plan: If running Cilium 1.19.x, this patch fixes a regression that briefly drops established pod connections during agent restart or upgrade; no deadline or KEV, but the availability impact warrants scheduling an upgrade to 1.19.6 this sprint.
- CI/CD — Skip
- Leader — Skip
- Platform/SRE — Plan: Two notable bug fixes: a regression that prevents Cilium from starting in kvstore mode with KPR enabled when etcd is behind a Kubernetes service, and incorrect policy denials for L7 load-balanced services on remote identity changes. If running Cilium 1.18.x in either of these configurations, schedule the patch update this sprint.
- CI/CD — Skip
- Leader — Skip