Search results

[ZTunnel] Ensure xDS server filters and sends only enrolled workloads

area/datapathImpacts bpf/ or low-level forwarding details, including map management and monitor messages.Impacts bpf/ or low-level forwarding details, including map management and monitor messages.

feature/ztunnel

kind/enhancementThis would improve or streamline existing functionality.This would improve or streamline existing functionality.

pinnedThese issues are not marked stale by our issue bot.These issues are not marked stale by our issue bot.

Status: Open.

#43113 In cilium/cilium;

· nddq opened on Dec 3, 2025

unable to add labels specific to cilium-secret namespaces

area/agentCilium agent related.Cilium agent related.

area/k8sImpacts the kubernetes API, or kubernetes -> cilium internals translation layers.Impacts the kubernetes API, or kubernetes -> cilium internals translation layers.

kind/community-reportThis was reported by a user in the Cilium community, eg via Slack.This was reported by a user in the Cilium community, eg via Slack.

kind/enhancementThis would improve or streamline existing functionality.This would improve or streamline existing functionality.

needs/triageThis issue requires triaging to establish severity and next steps.This issue requires triaging to establish severity and next steps.

Status: Open.

#43105 In cilium/cilium;

· jusch23 opened on Dec 3, 2025

Add encrypted field to Hubble flows and filtering to observe WireGuard/IPsec encrypted traffic

area/agentCilium agent related.Cilium agent related.

area/hubbleImpacts hubble server or relayImpacts hubble server or relay

kind/enhancementThis would improve or streamline existing functionality.This would improve or streamline existing functionality.

Status: Open.

Enhancement

#43073 In cilium/cilium;

· SRodi opened on Dec 1, 2025

CI: run BPF tests in their own network namespace

area/datapathImpacts bpf/ or low-level forwarding details, including map management and monitor messages.Impacts bpf/ or low-level forwarding details, including map management and monitor messages.

area/loaderImpacts the loading of BPF programs into the kernel.Impacts the loading of BPF programs into the kernel.

kind/enhancementThis would improve or streamline existing functionality.This would improve or streamline existing functionality.

pinnedThese issues are not marked stale by our issue bot.These issues are not marked stale by our issue bot.

Status: Open.

Enhancement

#42909 In cilium/cilium;

· julianwiedmann opened on Nov 21, 2025

CI: test with L3 host network interface

area/CIContinuous Integration testing issue or flakeContinuous Integration testing issue or flake

area/datapathImpacts bpf/ or low-level forwarding details, including map management and monitor messages.Impacts bpf/ or low-level forwarding details, including map management and monitor messages.

kind/enhancementThis would improve or streamline existing functionality.This would improve or streamline existing functionality.

pinnedThese issues are not marked stale by our issue bot.These issues are not marked stale by our issue bot.

Status: Open.

Enhancement

#42893 In cilium/cilium;

· julianwiedmann opened on Nov 20, 2025

Specifying unknown arguments in Cilium Agent config-dir

area/agentCilium agent related.Cilium agent related.

area/cliImpacts the command line interface of any command in the repository.Impacts the command line interface of any command in the repository.

good-first-issueGood starting point for new developers, which requires minimal understanding of Cilium.Good starting point for new developers, which requires minimal understanding of Cilium.

help-wantedPlease volunteer for this by adding yourself as an assignee!Please volunteer for this by adding yourself as an assignee!

kind/enhancementThis would improve or streamline existing functionality.This would improve or streamline existing functionality.

Status: Open.

#42781 In cilium/cilium;

· andy176631 opened on Nov 14, 2025

Gateway API Service targetPort Not Synchronized with Envoy Port (9999)

area/agentCilium agent related.Cilium agent related.

area/loadbalancingImpacts load-balancing and Kubernetes service implementationsImpacts load-balancing and Kubernetes service implementations

feature/k8s-gateway-api

kind/enhancementThis would improve or streamline existing functionality.This would improve or streamline existing functionality.

Status: Open.

Enhancement

#42747 In cilium/cilium;

· zakabluk opened on Nov 12, 2025

(ipsec) CI: always check for XFRM errors

area/CIContinuous Integration testing issue or flakeContinuous Integration testing issue or flake

feature/ipsecRelates to Cilium's IPsec featureRelates to Cilium's IPsec feature

kind/enhancementThis would improve or streamline existing functionality.This would improve or streamline existing functionality.

pinnedThese issues are not marked stale by our issue bot.These issues are not marked stale by our issue bot.

Status: Open.

Enhancement

#42725 In cilium/cilium;

· julianwiedmann opened on Nov 12, 2025

socketlb: replace cilium_lb*_reverse_sk map with socket storage

area/datapathImpacts bpf/ or low-level forwarding details, including map management and monitor messages.Impacts bpf/ or low-level forwarding details, including map management and monitor messages.

feature/socket-lbImpacts the Socket-LB part of Cilium's kube-proxy replacement.Impacts the Socket-LB part of Cilium's kube-proxy replacement.

kind/enhancementThis would improve or streamline existing functionality.This would improve or streamline existing functionality.

Status: Open.

Enhancement

#42658 In cilium/cilium;

· julianwiedmann opened on Nov 7, 2025

Convert ENCRYPTION_STRICT_MODE (<code>option.Config.EnableEncryptionStrictMode</code>) to load-time config

area/datapathImpacts bpf/ or low-level forwarding details, including map management and monitor messages.Impacts bpf/ or low-level forwarding details, including map management and monitor messages.

area/encryptionImpacts encryption support such as IPSec, WireGuard, or kTLS.Impacts encryption support such as IPSec, WireGuard, or kTLS.

area/loaderImpacts the loading of BPF programs into the kernel.Impacts the loading of BPF programs into the kernel.

kind/enhancementThis would improve or streamline existing functionality.This would improve or streamline existing functionality.

Status: Open.

Task

#42655 In cilium/cilium;

· rgo3 opened on Nov 7, 2025

Convert ENABLE_WIREGUARD (<code>pkg/wireguard/agent/cell.go</code> - WireGuard enabled) to load-time config

area/datapathImpacts bpf/ or low-level forwarding details, including map management and monitor messages.Impacts bpf/ or low-level forwarding details, including map management and monitor messages.

area/loaderImpacts the loading of BPF programs into the kernel.Impacts the loading of BPF programs into the kernel.

feature/wireguardRelates to Cilium's Wireguard featureRelates to Cilium's Wireguard feature

kind/enhancementThis would improve or streamline existing functionality.This would improve or streamline existing functionality.

Status: Open.

Task

#42654 In cilium/cilium;

· rgo3 opened on Nov 7, 2025

Convert ENABLE_IPSEC (<code>pkg/datapath/linux/ipsec/cell.go</code> - <code>option.Config.EnableIPsec</code>) to load-time config

area/datapathImpacts bpf/ or low-level forwarding details, including map management and monitor messages.Impacts bpf/ or low-level forwarding details, including map management and monitor messages.

area/loaderImpacts the loading of BPF programs into the kernel.Impacts the loading of BPF programs into the kernel.

feature/ipsecRelates to Cilium's IPsec featureRelates to Cilium's IPsec feature

kind/enhancementThis would improve or streamline existing functionality.This would improve or streamline existing functionality.

Status: Open.

Task

#42653 In cilium/cilium;

· rgo3 opened on Nov 7, 2025