You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Separate ingress and egress default deny modes with better control (#2156, @manalibhutiyani)
k8s: add support for IPBlock and Egress Rules with IPBlock (#2096, @ianvernon)
Kafka: Support access logging for Kafka requests/responses (#1870, @manalibhutiyani)
Added cilium endpoint log command that returns the endpoint's status log (#2060, @raybejjani)
Change endpoint status log in cilium endpoint get to show only the most recent log
Routes connecting the host to the Cilium IP space is now implemented as
individual route for each node in the cluster. This allows to assign IPs
which are part of the cluster CIDR to endpoints outside of the cluster
as long as the IPs are never used as node CIDRs. (#1888, @tgraf)
Fix swapped src dst IPs on Conntrack related messages on the monitor's output (#2228, @aanm)
Fix output of cilium endpoint list for endpoints using multiple labels. (#2225, @aanm)
bpf: fix verifier error in dameon debug mode with newer LLVM versions (#2181, @borkmann)
pkg/kvstore: fixed race in internal mutex map (#2179, @aanm)
Proxy ingress policy fix for LLVM 4.0 and greater. Resolves return code 500 'Internal Error' seen with some policies and traffic patterns. (#2162, @jrfastab)
Printing patch clang and kernel patch versions when starting cilium. (#2137, @aanm)
Clean up Connection Tracking entries when a new policy no longer allows it. #1667, #1823 (#2136, @aanm)
k8s: fix data race in d.loadBalancer.K8sEndpoints (#2129, @aanm)
Add internal queue for k8s watcher updates #1966 (#2123, @aanm)
k8s: fix missing deep copy when updating status (#2115, @aanm)
Accept traffic to Cilium in FORWARD chain (#2112, @tgraf)
Also clear the masquerade bit in the FORWARD chain to skip the masquerade rule installed by kube-proxy
Fix SNAT issue in combination with kube-proxy, when masquerade rule installed by kube-proxy takes precedence over rule installed by Cilium. (#2108, @tgraf)
Fixed infinite loop when importing CNP to kubernetes with an empty kafka version (#2090, @aanm)