tag: Cilium · 6 items
- Platform/SRE — Learn: Pre-GA release of Cilium 1.21.0 introduces delta-split Envoy xDS mode for lower CPU/latency and deprecates WireGuard Node Encryption — worth tracking for the eventual stable release, but no action warranted yet.
- CI/CD — Skip
- Leader — Skip
- Signals: deprecation mentioned (no explicit date found)
- Platform/SRE — Learn: Early pre-release of Cilium 1.21; worth tracking for upcoming CNI/eBPF features but not yet GA — no action on production clusters.
- CI/CD — Skip
- Leader — Skip
- Platform/SRE — Plan: Cilium 1.20.0 is a substantial GA minor release for a core CNI component; before upgrading, audit whether your cluster uses legacy Mutual Authentication, Envoy Go extensions, Kafka-aware policies, the cilium.io/v2alpha1 CiliumNodeConfig API, libnetwork, or custom CNI configs — all require migration steps per the upgrade guide. No forced-upgrade deadline exists, so schedule evaluation this quarter.
- CI/CD — Skip
- Leader — Skip
- Platform/SRE — Learn: Cilium is a core CNI/eBPF network policy component that platform engineers operate directly; a new minor GA release warrants reviewing the full changelog for breaking changes or notable capabilities, but the summary is too thin to justify a planned upgrade without knowing what changed.
- CI/CD — Skip
- Leader — Skip
- Platform/SRE — Plan: If running Cilium 1.19.x, this patch fixes a regression that briefly drops established pod connections during agent restart or upgrade; no deadline or KEV, but the availability impact warrants scheduling an upgrade to 1.19.6 this sprint.
- CI/CD — Skip
- Leader — Skip
- Platform/SRE — Plan: Two notable bug fixes: a regression that prevents Cilium from starting in kvstore mode with KPR enabled when etcd is behind a Kubernetes service, and incorrect policy denials for L7 load-balanced services on remote identity changes. If running Cilium 1.18.x in either of these configurations, schedule the patch update this sprint.
- CI/CD — Skip
- Leader — Skip