3 Releases published by 1 person

• v3.30.0

  published May 6, 2025

• v3.29.4

  published May 21, 2025

• v3.30.1

  published May 30, 2025

119 Pull requests merged by 21 people

• Close race condition in Goldmane startup

  #10512 merged Jun 4, 2025

• Use common version implementation in app-policy

  #10515 merged Jun 4, 2025

• [release-v3.30] Auto pick #10503: Fix mounting cgroupv2 into calico-node

  #10504 merged Jun 4, 2025

• [release-v3.29] Auto pick #10503: Fix mounting cgroupv2 into calico-node

  #10505 merged Jun 4, 2025

• [release-v3.28] Auto pick #10503: Fix mounting cgroupv2 into calico-node

  #10506 merged Jun 4, 2025

• Fix race in Goldmane writing to stream

  #10508 merged Jun 4, 2025

• [release tool] hashrelease promotion pipeline

  #9813 merged Jun 4, 2025

• Two small improvements to OpenStack UT coding

  #10499 merged Jun 4, 2025

• Fix mounting cgroupv2 into calico-node

  #10503 merged Jun 4, 2025

• chore: #HELM Allow to specify goldman and whisker crd spec

  #10501 merged Jun 3, 2025

• [CORE-11447] Add support for peakrate to bandwidth QoS controls

  #10458 merged Jun 3, 2025

• Fix up more ubuntu publishing issues [master]

  #10485 merged Jun 3, 2025

• [v3.30] reduce slack notifications to annoucing hashreleases. (#10305)

  #10492 merged Jun 2, 2025

• [v3.29] reduce slack notifications to annoucing hashreleases. (#10305)

  #10493 merged Jun 2, 2025

• When CNI ADD success, return all interfaces

  #10382 merged Jun 2, 2025

• Version updates for v3.30.1 release

  #10488 merged Jun 2, 2025

• Change ProgramRoutes config option to ProgramClusterRoutes

  #10491 merged May 30, 2025

• Add gomodder utility to verify / modify go module imports and structure

  #10463 merged May 30, 2025

• [BPF] add redirect counters

  #9829 merged May 30, 2025

• Add pod transformer to reduce kube-controllers memory usage

  #10402 merged May 29, 2025

• Some clean ups in route manager

  #10482 merged May 29, 2025

• Bump helm.sh/helm/v3 from 3.17.0 to 3.17.3

  #10474 merged May 29, 2025

• [BPF] always use skb->ifindex for fib lookup

  #10475 merged May 28, 2025

• eBPF - Don't store qdisc info when attaching tc

  #10477 merged May 28, 2025

• More Openstack packaging fixups [master]

  #10461 merged May 28, 2025

• Catch nil if kcc does not contain loadbalancer config (#10480)

  #10481 merged May 28, 2025

• Catch nil if kcc does not contain loadbalancer config

  #10480 merged May 28, 2025

• UTs for IPIP and VXLAN managers

  #10478 merged May 28, 2025

• [DE-2920] Move postrelease tests to release tool

  #10465 merged May 27, 2025

• [release-v3.30] Auto pick #10425: Pin ctlb programs

  #10466 merged May 26, 2025

• [release-v3.29] Auto pick #10466: Pin ctlb programs

  #10467 merged May 26, 2025

• [release-v3.28] Auto pick #10466: Pin ctlb programs

  #10468 merged May 26, 2025

• Fix conversion of handle from string to int

  #10464 merged May 26, 2025

• Sync collector dpstatshelper with ee

  #10459 merged May 23, 2025

• Pin CTLB programs to BPF filesystem.

  #10425 merged May 23, 2025

• [release-v3.29] Auto pick #10445: Replace the existing tc filter program

  #10455 merged May 23, 2025

• [release-v3.30] Auto pick #10445: Replace the existing tc filter program

  #10454 merged May 23, 2025

• [release-v3.28] Auto pick #10445: Replace the existing tc filter program

  #10456 merged May 23, 2025

• Add Ubuntu 24.04 noble support for OpenStack

  #8685 merged May 23, 2025

• Run BPF CI on ubuntu 24.04 and 22.04 (nftables)

  #10453 merged May 23, 2025

• Replace the existing tc filter program

  #10445 merged May 22, 2025

• [BPF] repurpose unused mark for CALI_SKB_MARK_TUNNEL_KEY_SET

  #10451 merged May 22, 2025

• Update policy tests to not rely on external file

  #10448 merged May 22, 2025

• Add initial Guardian FV

  #10443 merged May 22, 2025

• Fix unwanted hns policy update for windows endpoints

  #10437 merged May 22, 2025

• Add FVs for borrowed IPs in IPIP

  #10444 merged May 21, 2025

• Move vxlan and ipip manager duplicate code into route manager

  #10356 merged May 21, 2025

• [release tool] reduce slack notifications to only annoucing hashreleases

  #10305 merged May 21, 2025

• Fix HTTP exceptions setting expiry in Semaphore pipelines

  #10294 merged May 21, 2025

• Goldmane Stream refactor

  #10350 merged May 21, 2025

• Updates for release v3.29.4

  #10442 merged May 21, 2025

• Felix FV: fix warnings from orphaned etcd clients

  #10421 merged May 21, 2025

• [release-v3.30] Auto pick #10308: Avoid redirect_peer when sending packets to a vm

  #10415 merged May 20, 2025

• [release-v3.30] Auto pick #10251: Expose Selector nodes in public API #10272: Update go toolchain to v1.24.1. #10358: Fix calico-selector tool to use new API. Add test.

  #10438 merged May 20, 2025

• Add Guardian UT tests

  #10404 merged May 20, 2025

• Remove old unused client v1 code

  #10413 merged May 20, 2025

• [release-v3.30] (pick #10433) Disable watchlist in API server

  #10440 merged May 20, 2025

• Disable watchlist in API server

  #10433 merged May 20, 2025

• Add go vet to pre-flight checks.

  #10436 merged May 20, 2025

• Highlight upgrade change in v3.30.0

  #10431 merged May 19, 2025

• Enable whisker + goldmane in e2e tests

  #10210 merged May 17, 2025

• CORE-11022: Implementing TLS Cipher configurable for API Server

  #10380 merged May 16, 2025

• Update update-file-copyrights target to add copyright to new files

  #10422 merged May 16, 2025

• [TSLA-9204] Run ci for lib folder (previously missing)

  #10423 merged May 16, 2025

• Short names for staged policies (#10280)

  #10424 merged May 16, 2025

• Remove default tier prefix from Policy CRD without annotation

  #10418 merged May 16, 2025

• Improve IPSet dataplane callback API.

  #10416 merged May 16, 2025

• [v3.30] fix version output for envoy images (#10401)

  #10419 merged May 16, 2025

• Add target to update copyrights for all committed files that are out of date

  #10420 merged May 16, 2025

• Remove default tier prefix from Policy CRD without annotation

  #10417 merged May 15, 2025

• fix version output for cni-plugin and envoy images

  #10401 merged May 15, 2025

• [release tool] use go-containerregistry for image validations

  #10414 merged May 15, 2025

• Remove default tier prefix from Policy CRD without annotation

  #10399 merged May 15, 2025

• Disable CSI driver by default in helm chart

  #10400 merged May 14, 2025

• Policy name in default Tier

  #10391 merged May 14, 2025

• Implement partial resync after IP set update failures

  #9674 merged May 14, 2025

• Improve performance of IPAM GC controller

  #10333 merged May 13, 2025

• [release-v3.30] Auto pick #10117: Add support for custom DNS in the operator

  #10406 merged May 13, 2025

• [release-v3.29] Auto pick #10117: Add support for custom DNS in the operator

  #10407 merged May 13, 2025

• Upstream IP sets dataplane API changes.

  #10397 merged May 12, 2025

• [release-v3.29] Auto pick #9859: Update image used to enable qemu emulation.

  #10393 merged May 10, 2025

• [release tool] [v3.30] update image version assertion

  #10388 merged May 10, 2025

• [release tool] update image version assertion

  #10387 merged May 10, 2025

• Run GH action more frequently, and increase ratelimit

  #10392 merged May 9, 2025

• Add OCP-required labels to new v3.30+ images [v3.30]

  #10390 merged May 9, 2025

• API server - Policy WatchManager

  #10346 merged May 9, 2025

• Go dependency update May 2025

  #10384 merged May 9, 2025

• Add OCP-required labels to new v3.30+ images [master]

  #10370 merged May 9, 2025

• [BPF] rework L2 overlay (vxlan) for performance

  #9965 merged May 9, 2025

• Update number of retries in python k8st

  #10386 merged May 9, 2025

• [Release v3.30] Picks from master

  #10374 merged May 9, 2025

• [release-v3.30] Auto pick #10383: Add missing tier permissions to flannel migration controller

  #10385 merged May 9, 2025

• Add missing tier permissions to flannel migration controller

  #10383 merged May 9, 2025

• OpenStack: Don't modify port dict when collecting additional information

  #10192 merged May 9, 2025

• Add FV test for deleting an iptables insert rule.

  #10100 merged May 9, 2025

• [CORE-11318] : Upgrade node-driver-registrar golang.org libs

  #10381 merged May 8, 2025

• [release-v3.30] Auto pick #10377: Switch delete-local-data to delete-emptydir-data

  #10379 merged May 8, 2025

• Add hack tool to stress IPAM GC node deletion logic

  #10378 merged May 8, 2025

• Switch delete-local-data to delete-emptydir-data

  #10377 merged May 8, 2025

• [cherry-pick] [release tool] fix generating release notes

  #10371 merged May 8, 2025

• fix publishing whisker images

  #10372 merged May 8, 2025

• [master] Semaphore Auto go-build Update

  #10373 merged May 8, 2025

• Add GH action for stale enhancements and bugs

  #10369 merged May 7, 2025

• [CORE-11318] : Upgrade golang.org libs

  #10368 merged May 7, 2025

• [cherry pick] [v3.29] [release tool] fixes for image scanning service (#10365) [DE-3382]

  #10367 merged May 7, 2025

• [cherry pick] [v3.30] [release tool] fixes for image scanning service (#10365) [DE-3382]

  #10366 merged May 7, 2025

• [release tool] fixes for image scanning service [DE-3382]

  #10365 merged May 7, 2025

• [v3.30] Update Felix Grafana Dashboard

  #10360 merged May 7, 2025

• [release-v3.30] Auto pick #10203: Refactor package structure

  #10349 merged May 6, 2025

• [release-v3.30] Auto pick #10355: calicoctl: fix panic when using wrong

  #10362 merged May 6, 2025

• Cherry pick uninstall permissions fix

  #10347 merged May 6, 2025

• Fix flannel tests and duplicated release notes

  #10363 merged May 6, 2025

• Add GH action to mark and close stale issues

  #10361 merged May 6, 2025

• Fix calico-selector tool to use new API. Add test.

  #10358 merged May 6, 2025

• Update Felix Grafana dashboard.

  #10359 merged May 6, 2025

• [CORE-11093] calicoctl: fix panic when using wrong WorkloadEndpoint name

  #10355 merged May 6, 2025

• Do not use redirect_peer when sending packets to kubevirt VMs

  #10308 merged May 5, 2025

• [CORE-11318] : upgrade k8s and libs to 1.30.12

  #10328 merged May 5, 2025

• Updates for v3.30.0 release

  #10342 merged May 5, 2025

27 Pull requests opened by 18 people

• Addresses #7881: removing weaker ciphers

  #10353 opened May 5, 2025

• Windows: felix config natExclusions for host net

  #10357 opened May 6, 2025

• Use more efficient ListPager API.

  #10398 opened May 12, 2025

• [WIP] Optimize storage of matched policy

  #10408 opened May 13, 2025

• feat: Add IPAM block cleanup for removed nodes

  #10428 opened May 18, 2025

• [WIP]Fix Windows cni-plugin fv

  #10439 opened May 20, 2025

• Proof of concept: Use v3 CRDs directly

  #10447 opened May 21, 2025

• [WIP] Support IPv6 in IPIP encapsulation

  #10452 opened May 22, 2025

• Prioritise static BGP filters over user defined ones

  #10457 opened May 23, 2025

• [cherry-pick #8685] Add Ubuntu 24.04 noble support for OpenStack

  #10462 opened May 23, 2025

• Add NextHopMode to BGPPeer API

  #10471 opened May 26, 2025

• Felix programs in-cluster no encapsulation routes

  #10472 opened May 26, 2025

• Optimize performance by querying affinity first.

  #10484 opened May 29, 2025

• eBPF - Cleanup unused code.

  #10486 opened May 29, 2025

• Update golang to 1.24.3

  #10487 opened May 29, 2025

• [CORE-11448] QoS controls: add packet burst configuration

  #10489 opened May 30, 2025

• ebpf - Fix attaching ctlb for ipv6 and detaching programs in legacy mode.

  #10490 opened May 30, 2025

• Enable TLS for /metrics endpoint and add tests

  #10495 opened Jun 2, 2025

• [DRAFT] More Guardian FVs

  #10496 opened Jun 2, 2025

• [master] Semaphore Auto go-build Update

  #10497 opened Jun 3, 2025

• OpenStack-level support for peakrate control

  #10500 opened Jun 3, 2025

• [CORE-11495] v3.28.5 - Upgrade golang 1.23.10 and x/net library

  #10510 opened Jun 4, 2025

• [BPF] multihomed fv

  #10511 opened Jun 4, 2025

• [release-v3.30] Auto pick #10508: Fix race in Goldmane writing to stream

  #10513 opened Jun 4, 2025

• [release-v3.30] Auto pick #10512: Close race condition in Goldmane startup

  #10514 opened Jun 4, 2025

• Fix serviceaccount name in helm chart

  #10516 opened Jun 4, 2025

• bpf multi homed fix 3.30

  #10517 opened Jun 5, 2025

43 Issues closed by 16 people

• 【Ask for help】networkpolicies.projectcalico.org is forbidden: Operation on Calico tiered policy is forbidden

  #10110 closed Jun 3, 2025

• calico-node error when installed in linux/arm64

  #7340 closed Jun 3, 2025

• Inconsistency of operator-crds.yaml in installation instructions

  #10394 closed Jun 3, 2025

• create [ipv6 only] k8s cluster，calico-node on worker node in Init:CrashLoopBackOff status

  #10483 closed Jun 3, 2025

• Calico 3.29.1: OwnerReferences don't work for NetworkPolicies

  #9574 closed Jun 2, 2025

• CNI ADD operation should return interfaces created inside the container

  #10351 closed Jun 2, 2025

• IPAM GC not fast enough, leading to memory bloat

  #7508 closed May 29, 2025

• calico-kube-controller list/watch pod frequent OOM

  #8155 closed May 29, 2025

• [BPF]How to completely disable eBPF mode?

  #9620 closed May 28, 2025

• v3.30 new feature LoadBalancer IP address not allocated

  #10476 closed May 28, 2025

• 3.28.4: eBPF: Failed to apply policy to endpoint, leaving it dirty error=ingress

  #10376 closed May 22, 2025

• Egress Gateway in AKS with Calico

  #10450 closed May 22, 2025

• Windows: existing TCP connections are dropped when a label is applied to the pod

  #10199 closed May 22, 2025

• Feedback: My FluxCD-based upgrade experience from v3.29.3 to v3.30.0

  #10429 closed May 21, 2025

• Terminating Windows pods hangs on FailedKillPod: ... hcnDeleteNamespace: ... The specified request is unsupported

  #6974 closed May 20, 2025

• Help me! Why? calico-node: CrashLoopBackOff

  #10146 closed May 20, 2025

• Configmap Using SHA1 algorithm

  #10434 closed May 20, 2025

• In BGP IPIP mode, IPv6 dual stack env, routes for reaching pod are using router's link local address as gateway IP, instead of other node's DHCP address

  #10321 closed May 19, 2025

• cannot access nodeport service from non pod running node

  #10427 closed May 17, 2025

• cannot access nodeport service from non pod running node

  #10426 closed May 17, 2025

• Unable to patch network policies after Calico 3.29.0 upgrade

  #9437 closed May 16, 2025

• feature request: CNI file permissions more restrictive (600)

  #7461 closed May 15, 2025

• Critical: Sluggishness and Admission WebHook failings since 3.24.x, cluster not working

  #7469 closed May 15, 2025

• Tigera-Operator helm chart Installation spec kubeletVolumePluginPath missing

  #8335 closed May 14, 2025

• IPAM Loadbalancer is ignoring ipv6

  #10412 closed May 14, 2025

• Multiple GlobalNetworkPolicies are not additive

  #10409 closed May 14, 2025

• Make calico container images distroless/ static

  #7684 closed May 14, 2025

• Whisker cannot access goldmane when using non-default cluster domain

  #10396 closed May 13, 2025

• Expose CNI net directory in Helm chart?

  #8601 closed May 12, 2025

• calicoctl don't support with '--log-level=debug'

  #8477 closed May 12, 2025

• Add custom label to all objects in kubernetes chart

  #8391 closed May 12, 2025

• Unable to set different resource requests for calico-node daemonsets based on multiple node types

  #8104 closed May 12, 2025

• Question about Calico IPPool creation

  #7845 closed May 12, 2025

• BGP: advertise node's PodCIDR and not Pod IPs

  #8374 closed May 12, 2025

• 3.30: resource not found GlobalNetworkPolicy/NetworkPolicy

  #10389 closed May 9, 2025

• Pod in nat-outgoing should not be SNATed when it accesses local cluster hosts

  #8960 closed May 9, 2025

• Hostendpoints of newly joined nodes are created too slowly

  #9175 closed May 8, 2025

• calico-node and calico-typha on debian crashed

  #10266 closed May 6, 2025

• The BGP port is open, but it cannot ping the pod

  #10247 closed May 6, 2025

• with error: clusterinformations.crd.projectcalico.org "default" not found

  #10166 closed May 6, 2025

• calicoctl get workloadendpoint panics when getting a single endpoint

  #9855 closed May 6, 2025

• Converting from iptables to nftables fails

  #10348 closed May 5, 2025

• [BPF] forwarding to peer with kubevirt does not work

  #10058 closed May 5, 2025

19 Issues opened by 19 people

• tigera operator pods do not start when bootstrapping okd/openshift on user provisioned infra

  #10509 opened Jun 4, 2025

• Role Biding and Secret access issue in Calico V0.30.0 and V0.30.1

  #10507 opened Jun 4, 2025

• Using ip pool annotations on namespaces and node selectors within the ip pools

  #10502 opened Jun 3, 2025

• Excessive API requests from operator with manage CRDs enabled causes high API request latency

  #10498 opened Jun 3, 2025

• Calico Operator IPPools Not Created Correctly on Debian Nodes

  #10494 opened Jun 2, 2025

• calico components can't be run with segfault error

  #10479 opened May 28, 2025

• Why do we need the BlockAffinity resource?

  #10473 opened May 27, 2025

• the node can't access to the local pod due the cali-rpf-skip iptables rule

  #10470 opened May 26, 2025

• Multihoming broken after upgrade to 3.30.0

  #10469 opened May 25, 2025

• How does Calico troubleshoot forwarding rule issues

  #10449 opened May 22, 2025

• Unable to reach Nodeport on some of the nodes

  #10446 opened May 21, 2025

• setup [ipv6 only] k8s cluster，after first work node join cluster, POD calico-node on worker node in CrashLoopBackOff status

  #10441 opened May 20, 2025

• Configmap is using sha1 algoithm which is unsafe

  #10435 opened May 20, 2025

• Traffic Distribution feature (kubernetes 1.33)

  #10430 opened May 19, 2025

• Calico RKE2 Windows - Pods stuck on Running 0/1 - Nodes stuck with SYN_SENT status

  #10411 opened May 14, 2025

• Manage Calico Whisker integration with load balancer using Tigera Operator CRDs

  #10405 opened May 13, 2025

• StatefulSet Pod network issues due to veth name collision during terminated pod garbage collection

  #10375 opened May 8, 2025

• Discussion: Policy name updates during upgrade to Calico v3.30

  #10364 opened May 7, 2025

• plugin type="calico" failed (add): error getting ClusterInformation: Get "https://172.20.0.1:443/apis/crd.projectcalico.org/v1/clusterinformations/default": Service Unavailable

  #10352 opened May 5, 2025

105 Unresolved conversations

Sometimes conversations happen on old items that aren’t yet closed. Here is a list of all the Issues and Pull Requests with unresolved conversations.

• Fail and retry if mtu file is failed to be written or not found

  #10270 commented on Jun 4, 2025 • 8 new comments

• Add logging interface to decouple implementation from codebase

  #9847 commented on May 23, 2025 • 1 new comment

• [BPF] Support for IPv4 fragmentation

  #10335 commented on May 30, 2025 • 0 new comments

• calico ipip tunnel on secondary ipv4 does not work

  #7374 commented on May 16, 2025 • 0 new comments

• Calico DefaultEndpointToHostAction is always set to Accept in iptables regardless the configured value

  #7398 commented on May 16, 2025 • 0 new comments

• feature request: improve robustness of some pod networking situations in light of control plane failure

  #7403 commented on May 15, 2025 • 0 new comments

• IPv6 over IPv4 tunneling

  #7422 commented on May 15, 2025 • 0 new comments

• feature: Skip binary copy on read-only system

  #7486 commented on May 14, 2025 • 0 new comments

• Improvements to Calico Configuration

  #7497 commented on May 14, 2025 • 0 new comments

• Add support for preserving the real client IP for IPv6 based calico k8s clusters

  #7787 commented on May 14, 2025 • 0 new comments

• Failure in Pod connectivity when an additional IP address on the primary interface in the same subnet is added and removed

  #8739 commented on May 14, 2025 • 0 new comments

• [Bug] Logs are crowded with `HostMetadataV4V6Update` on every calico-node pod.

  #7479 commented on May 14, 2025 • 0 new comments

• Allow NATOutgoingAddress to be a range

  #7489 commented on May 14, 2025 • 0 new comments

• [windows/k8s/cni] calico cni supports k8s pod of windows hyper-v mode ?

  #7490 commented on May 14, 2025 • 0 new comments

• Add ability to log Kubernetes native Network Policies

  #7519 commented on May 13, 2025 • 0 new comments

• Feature: Add settings in calico for network policy logging

  #7531 commented on May 13, 2025 • 0 new comments

• Pods are scheduled to a Kubernetes worker node before calico-node has shared and received BGP route info

  #7788 commented on May 13, 2025 • 0 new comments

• Couldn't get resource list for projectcalico.org/v3: the server is currently unable to handle the request

  #7555 commented on May 13, 2025 • 0 new comments

• `csiNodeDriverDaemonSet` is not in Installation spec

  #7569 commented on May 13, 2025 • 0 new comments

• After uninstalling calico the nodes stuck in NetworkUnavailable because of CalicoIsDown

  #7816 commented on May 13, 2025 • 0 new comments

• calico-node: Unable to chown /var/lib/calico/ on EKS when nonPrivileged is Enabled

  #7653 commented on May 13, 2025 • 0 new comments

• Dockerhub images for bpftool and bitnami/kubectl on Dockerhub are not multi-arch enabled causing failures on s390x arch

  #7654 commented on May 13, 2025 • 0 new comments

• calico-node cannot refresh expired serviceaccount token due to apiserver throttling

  #7694 commented on May 13, 2025 • 0 new comments

• Calico Support TCP-AO ISSUE

  #7708 commented on May 13, 2025 • 0 new comments

• Improved / automated certificate rotation for calico-apiserver (+ better docs)

  #9419 commented on May 13, 2025 • 0 new comments

• Uninstall of eBPF Calico breaks networking (on EKS/Bottlerocket)

  #7745 commented on May 13, 2025 • 0 new comments

• Document all the supported container registries for the calico components

  #7773 commented on May 13, 2025 • 0 new comments

• change cni name from k8s-pod-network to calico

  #7837 commented on May 13, 2025 • 0 new comments

• Optimize error prompts

  #10295 commented on May 6, 2025 • 0 new comments

• list ippools with label selector

  #10267 commented on May 14, 2025 • 0 new comments

• support use WatchList for k8s

  #10187 commented on May 12, 2025 • 0 new comments

• Use new set.Adaptive type in named port index

  #10027 commented on May 7, 2025 • 0 new comments

• [Do not merge] Update vmss scripts for win-cni fv

  #9695 commented on May 21, 2025 • 0 new comments

• [WIP] Share (some) Kubernetes watches between Typha Syncers.

  #9632 commented on May 15, 2025 • 0 new comments

• Add option to disable announcement of aggregated LoadBalancerIP ranges

  #8837 commented on May 21, 2025 • 0 new comments

• [BPF] CgroupV2Path override for operator installs

  #8600 commented on May 18, 2025 • 0 new comments

• Removing weak ciphers

  #7882 commented on May 7, 2025 • 0 new comments

• add calicovpp fv tests

  #7424 commented on May 21, 2025 • 0 new comments

• BGP configuration should use a node selector

  #7589 commented on Jun 3, 2025 • 0 new comments

• Parsing value for FailsafeInboundHostPorts: "[]" (from environment variable) panic: runtime error: slice bounds out of range [:-1]

  #10338 commented on Jun 3, 2025 • 0 new comments

• VXLAN in 3.29 breaks any connectivity except ICMP

  #9433 commented on Jun 3, 2025 • 0 new comments

• Pod Connectivity Issue on Oracle Linux 9 with Calico (rke2 custom cluster)

  #9985 commented on Jun 3, 2025 • 0 new comments

• Node tunl0 Routing Issue

  #10041 commented on Jun 3, 2025 • 0 new comments

• The next hop of the route received by the switch is incorrect.

  #9887 commented on Jun 3, 2025 • 0 new comments

• Possible memory leak in calico-kube-controllers v3.29.2

  #10175 commented on Jun 3, 2025 • 0 new comments

• error: no kind "Installation" is registered for version "operator.tigera.io/v1" in scheme "pkg/scheme/scheme.go:28"

  #9334 commented on Jun 3, 2025 • 0 new comments

• Support for IPIP encapsulation for IPv6 pools

  #5206 commented on Jun 3, 2025 • 0 new comments

• Don't rely on BGP in public clouds

  #5311 commented on May 30, 2025 • 0 new comments

• kube-controllers should clean up IPAM handles even if no allocation exists

  #8548 commented on May 30, 2025 • 0 new comments

• select nodes to expose NodePort service in eBPF mode

  #5495 commented on May 30, 2025 • 0 new comments

• vxlan.calico interface should be created when nodeSelector limitation is removed in ippool

  #8181 commented on May 20, 2025 • 0 new comments

• Cannot make a curl to pod's IP probably due to interface mismatch

  #10233 commented on May 20, 2025 • 0 new comments

• HostEndpoint node selector + interface name regexp

  #8840 commented on May 16, 2025 • 0 new comments

• Change the default interface name in the pod

  #8594 commented on May 10, 2025 • 0 new comments

• Suggestion for Calico eBPF: Introduction of Direct Routing Mode

  #8620 commented on May 10, 2025 • 0 new comments

• restoreCalicoLabels Memory optimization

  #8627 commented on May 10, 2025 • 0 new comments

• calicoctl Command prompt question

  #8653 commented on May 10, 2025 • 0 new comments

• Issue migrating Windows nodes to Tigera Operator

  #8669 commented on May 10, 2025 • 0 new comments

• calico-node warning: "Configured MTU is larger than detected host interface MTU" seems misleading

  #8674 commented on May 10, 2025 • 0 new comments

• eBPF dataplane support for host postrouting masquerade to external services

  #8701 commented on May 10, 2025 • 0 new comments

• Inconsistent terminationGracePeriodSeconds set in different versions of calico-node daemonset

  #8691 commented on May 10, 2025 • 0 new comments

• calico-kube-controller crash with concurrent map read and map write

  #8705 commented on May 10, 2025 • 0 new comments

• CalicoNodeStatus can't be updated when etcd performance is (temporarily) degraded

  #8715 commented on May 10, 2025 • 0 new comments

• Configuring calico-node on non cluster hosts using the docker image does not properly register nodes into ETCD

  #8724 commented on May 10, 2025 • 0 new comments

• Calico eBPF PPC64 support

  #8744 commented on May 10, 2025 • 0 new comments

• There is no need to call GetIPAMConfig multiple times during the AssignIP process

  #8747 commented on May 10, 2025 • 0 new comments

• Support IP fragmentation in eBPF

  #8821 commented on May 9, 2025 • 0 new comments

• Discussion: crd.projectcalico.org/v1 vs projectcalico.org/v3

  #6412 commented on May 9, 2025 • 0 new comments

• CFP: adding route "options" beside usual ones

  #9348 commented on May 9, 2025 • 0 new comments

• only ipv6 monitor error

  #8765 commented on May 9, 2025 • 0 new comments

• HostEndpoint objects remain after calico node is deleted when DATASTORE_TYPE is kubernetes

  #8822 commented on May 9, 2025 • 0 new comments

• Enable CI for ppc64le

  #8920 commented on May 9, 2025 • 0 new comments

• BGP issue with IPV6 and multipath/ecmp

  #8938 commented on May 9, 2025 • 0 new comments

• Is there any solution to address family redistributing routes for both ipv4 and ipv6 in calico-bird

  #9013 commented on May 8, 2025 • 0 new comments

• Add network name to Workload Endpoint labels

  #9128 commented on May 8, 2025 • 0 new comments

• timed out waiting for interface matching the management IP (192.168.229.229) of network Calico，windows node

  #9236 commented on May 8, 2025 • 0 new comments

• hcnnetwork get weird when change windows timezone

  #9359 commented on May 8, 2025 • 0 new comments

• Allow specifying the Helm Chart's imagePullPolicy in values.yaml

  #7107 commented on May 7, 2025 • 0 new comments

• Weak cipher suites supported on calico-typha

  #7881 commented on May 7, 2025 • 0 new comments

• ArgoCD installation failing due to `invalid: metadata.annotations`

  #8159 commented on May 13, 2025 • 0 new comments

• Support for CNI GC Verb

  #8500 commented on May 12, 2025 • 0 new comments

• Honor well-known 65535:0 community defined in RFC-8326: Graceful BGP Session Shutdown

  #8442 commented on May 12, 2025 • 0 new comments

• Allow to create generically global network policy that matches namespace "Self"

  #8382 commented on May 12, 2025 • 0 new comments

• Change operator defaults so that Typha no longer ignores node cordoning

  #8371 commented on May 12, 2025 • 0 new comments

• Support IPv6 for `host-local` IPAM plugin in calico

  #8190 commented on May 12, 2025 • 0 new comments

• IPAM IP handle isn't released after node is deleted (IP leak handle)

  #7839 commented on May 12, 2025 • 0 new comments

• If WireGuard is disabled, the WireGuard module should not be loaded

  #7833 commented on May 12, 2025 • 0 new comments

• GlobalNetworkPolicy Using `notNets` and `0.0.0.0/0` Causes `calico-node` Pods to Crash

  #9211 commented on May 11, 2025 • 0 new comments

• Calico freezing IPAMBlock cleanup

  #8643 commented on May 11, 2025 • 0 new comments

• Calico operator fails to read `/var/lib/calico/mtu` because of SELinux

  #7851 commented on May 10, 2025 • 0 new comments

• iptablesFilterDenyAction: REJECT -> calio-nodes do not ready

  #7914 commented on May 10, 2025 • 0 new comments

• High CPU load on calico-node -felix conntrack

  #7948 commented on May 10, 2025 • 0 new comments

• incorrect name validation/restrictions

  #7990 commented on May 10, 2025 • 0 new comments

• calico-kube-controllers panic (calico 3.26.1)

  #7972 commented on May 10, 2025 • 0 new comments

• in some cases, windows calico node-agent doesnt mark networkUnavailable:false... but sometimes it does ... should agent be modifying this condition, at all?

  #7996 commented on May 10, 2025 • 0 new comments

• calico-node CrashLoopBackoff due to permissions issue with non-root user

  #8016 commented on May 10, 2025 • 0 new comments

• Support for a bug report or sysdump in calicoctl

  #8020 commented on May 10, 2025 • 0 new comments

• calico-node removes no encapsulated routes on startup

  #8071 commented on May 10, 2025 • 0 new comments

• Newer istio version support

  #8132 commented on May 10, 2025 • 0 new comments

• Error on ebpf migration documentation

  #8141 commented on May 10, 2025 • 0 new comments

• Disable hostMTU monitoring if veth_mtu is explicity configured

  #8197 commented on May 10, 2025 • 0 new comments

• Allow passing imagePullSecrets in base64

  #8204 commented on May 10, 2025 • 0 new comments

• VPP: external access to a dual-stack service doesn't work for IPv6

  #8269 commented on May 10, 2025 • 0 new comments

• libcalico-go should improve error handle when use list+watch resource mode to reduce load on apiserver

  #8277 commented on May 10, 2025 • 0 new comments

• Calico-apiserver pods are all restarting on change to extension-apiserver-authentication Configmap causing webhooks to fail

  #8493 commented on May 10, 2025 • 0 new comments